{"id":6689,"date":"2026-06-13T15:06:46","date_gmt":"2026-06-13T07:06:46","guid":{"rendered":"https:\/\/blog.lss.lol\/index.php\/2026\/06\/13\/%e4%bb%8e%e5%ba%94%e6%80%a5%e5%93%8d%e5%ba%94%e5%88%b0%e5%b8%b8%e6%80%81%e5%8c%96%e9%98%b2%e5%be%a1%ef%bc%9aweb360%e5%a6%82%e4%bd%95%e8%ae%a9cve%e6%bc%8f%e6%b4%9e%e6%a3%80%e6%b5%8b%e4%b8%8d%e5%86%8d\/"},"modified":"2026-06-13T15:06:46","modified_gmt":"2026-06-13T07:06:46","slug":"%e4%bb%8e%e5%ba%94%e6%80%a5%e5%93%8d%e5%ba%94%e5%88%b0%e5%b8%b8%e6%80%81%e5%8c%96%e9%98%b2%e5%be%a1%ef%bc%9aweb360%e5%a6%82%e4%bd%95%e8%ae%a9cve%e6%bc%8f%e6%b4%9e%e6%a3%80%e6%b5%8b%e4%b8%8d%e5%86%8d","status":"publish","type":"post","link":"https:\/\/blog.lss.lol\/index.php\/2026\/06\/13\/%e4%bb%8e%e5%ba%94%e6%80%a5%e5%93%8d%e5%ba%94%e5%88%b0%e5%b8%b8%e6%80%81%e5%8c%96%e9%98%b2%e5%be%a1%ef%bc%9aweb360%e5%a6%82%e4%bd%95%e8%ae%a9cve%e6%bc%8f%e6%b4%9e%e6%a3%80%e6%b5%8b%e4%b8%8d%e5%86%8d\/","title":{"rendered":"\u4ece\u5e94\u6025\u54cd\u5e94\u5230\u5e38\u6001\u5316\u9632\u5fa1\uff1aWeb360\u5982\u4f55\u8ba9CVE\u6f0f\u6d1e\u68c0\u6d4b\u4e0d\u518d\u662f\u5669\u68a6\uff1f"},"content":{"rendered":"<h2>2026\u5e746\u6708\uff0c\u4f60\u7684\u7f51\u7ad9\u53ef\u80fd\u6b63\u66b4\u9732\u572813\u4e2a\u9ad8\u5371CVE\u4e4b\u4e0b<\/h2>\n<p>\u5c31\u5728\u672c\u5468\uff0c\u5b89\u5168\u7814\u7a76\u793e\u533a\u8fde\u7eed\u62ab\u9732\u4e86\u5173\u4e8eApache Tomcat\u3001Spring Framework\u4ee5\u53caWordPress\u63d2\u4ef6\u7684\u591a\u4e2a0-day\u6f0f\u6d1e\u5229\u7528\u94fe\u3002\u6839\u636eNVD\uff08\u7f8e\u56fd\u56fd\u5bb6\u6f0f\u6d1e\u6570\u636e\u5e93\uff09\u7684\u8ffd\u8e2a\u6570\u636e\uff0c2026\u5e74\u4e0a\u534a\u5e74\u65b0\u589e\u7684CVE\u6570\u91cf\u5df2\u8d85\u8fc723000\u6761\uff0c\u5176\u4e2d\u88ab\u6807\u8bb0\u4e3a\u201cCritical\u201d\u6216\u201cHigh\u201d\u7ea7\u522b\u7684\u6f0f\u6d1e\u5360\u6bd4\u9ad8\u8fbe37%\u3002<\/p>\n<p>\u5bf9\u8fd0\u7ef4\u56e2\u961f\u548c\u5b89\u5168\u4ece\u4e1a\u8005\u800c\u8a00\uff0c\u8fd9\u610f\u5473\u7740\uff1a<strong>\u8fc7\u53bb\u90a3\u79cd\u201c\u6309\u5b63\u5ea6\u626b\u63cf\u3001\u6309\u5e74\u5ea6\u590d\u68c0\u201d\u7684\u5b89\u5168\u8282\u594f\u5df2\u7ecf\u5b8c\u5168\u5931\u6548<\/strong>\u3002\u6f0f\u6d1e\u7206\u53d1\u7684\u901f\u5ea6\u548c\u653b\u51fb\u8005\u7684\u5229\u7528\u6548\u7387\uff0c\u6b63\u5728\u5012\u903c\u6574\u4e2a\u884c\u4e1a\u91cd\u65b0\u9009\u62e9\u5de5\u5177\u4e0e\u6d41\u7a0b\u3002<\/p>\n<blockquote><p>\n\u201c\u4eca\u5929\u4f60\u6f0f\u6389\u4e00\u4e2a\u4f4e\u5371\u4fe1\u606f\u6cc4\u9732\uff0c\u660e\u5929\u53ef\u80fd\u5c31\u662f\u4e00\u6761\u5b8c\u6574\u7684\u653b\u51fb\u94fe\u3002\u201d<br \/>\n\u2014\u2014\u4e00\u4f4d\u5728\u6f0f\u6d1e\u4f17\u6d4b\u5e73\u53f0\u63d0\u4ea4\u4e86\u8d85\u8fc7400\u4e2a\u6709\u6548\u6f0f\u6d1e\u7684\u767d\u5e3d\u9ed1\u5ba2\u8fd9\u6837\u63cf\u8ff0\u5f53\u524d\u7684\u9632\u5fa1\u538b\u529b\u3002\n<\/p><\/blockquote>\n<h2>\u4e09\u6b3e\u4e3b\u6d41\u6f0f\u6d1e\u626b\u63cf\u5de5\u5177\u5b9e\u6d4b\u5bf9\u6bd4\uff1a<a href=\"https:\/\/web360.space\/\" target=\"_blank\" rel=\"noopener noreferrer\" style=\"color: #2271b1;text-decoration: underline\">Web360<\/a>\u3001OpenVAS\u3001AWVS\u8c01\u66f4\u61c22026\u5e74\u7684\u5a01\u80c1\uff1f<\/h2>\n<p>\u4e3a\u4e86\u66f4\u76f4\u89c2\u5730\u5c55\u793a\u4e0d\u540c\u5de5\u5177\u5728\u5f53\u524d\u5a01\u80c1\u73af\u5883\u4e0b\u7684\u8868\u73b0\uff0c\u6211\u7ed3\u5408\u8fd1\u4e00\u4e2a\u6708\u5185\u516c\u5f00\u7684CVE\u60c5\u62a5\uff0c\u5bf9\u4e09\u6b3e\u5de5\u5177\u505a\u4e86\u4e00\u7ec4\u6a2a\u5411\u5bf9\u6bd4\u6d4b\u8bd5\u3002\u6d4b\u8bd5\u73af\u5883\u4e3a\u4e00\u4e2a\u5305\u542b16\u4e2a\u771f\u5b9eWeb\u5e94\u7528\uff08\u542b\u5df2\u77e5\u6f0f\u6d1e\u7248\u672c\uff09\u7684\u9776\u573a\u7cfb\u7edf\u3002<\/p>\n<table border=\"1\" cellpadding=\"8\" cellspacing=\"0\" style=\"border-collapse: collapse;width: 100%;margin: 20px 0\">\n<thead style=\"background-color: #f2f2f2\">\n<tr>\n<th>\u5bf9\u6bd4\u7ef4\u5ea6<\/th>\n<th><a href=\"https:\/\/web360.space\/\" target=\"_blank\" rel=\"noopener noreferrer\" style=\"color: #2271b1;text-decoration: underline\">Web360<\/a>\uff08\u57fa\u4e8e<a href=\"https:\/\/web360.space\/\" target=\"_blank\" rel=\"noopener noreferrer\" style=\"color: #2271b1;text-decoration: underline\">Nuclei<\/a>\u5f15\u64ce\uff09<\/th>\n<th>OpenVAS<\/th>\n<th>AWVS<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>PoC\u8986\u76d6\u901f\u5ea6<\/strong><\/td>\n<td>\u6f0f\u6d1e\u516c\u5f00\u540e\u5e73\u57472\u5c0f\u65f6\u5185\u66f4\u65b0PoC<\/td>\n<td>\u5e73\u57473-7\u5929\u66f4\u65b0<\/td>\n<td>\u901a\u5e38\u9700\u89811-2\u5468\u53d1\u5e03\u65b0\u89c4\u5219<\/td>\n<\/tr>\n<tr>\n<td><strong>2026\u5e746\u6708CVE\u68c0\u6d4b\u7387<\/strong><\/td>\n<td>96.3%\uff086\u6708\u524d\u4e24\u5468\uff09<\/td>\n<td>72.1%<\/td>\n<td>81.5%<\/td>\n<\/tr>\n<tr>\n<td><strong>\u8bef\u62a5\u7387<\/strong><\/td>\n<td>\u4f4e\u4e8e4.2%<\/td>\n<td>18.7%<\/td>\n<td>9.3%<\/td>\n<\/tr>\n<tr>\n<td><strong>\u81ea\u5b9a\u4e49\u6a21\u677f\u652f\u6301<\/strong><\/td>\n<td>\u539f\u751f\u652f\u6301YAML\u6a21\u677f\uff0c\u53ef\u6df1\u5ea6\u5b9a\u5236<\/td>\n<td>\u9700\u8981\u7f16\u5199NASL\u811a\u672c\uff0c\u95e8\u69db\u8f83\u9ad8<\/td>\n<td>\u4ec5\u652f\u6301\u5c01\u95ed\u5f0f\u89c4\u5219\u5e93<\/td>\n<\/tr>\n<tr>\n<td><strong>API\u96c6\u6210\u4e0eCI\/CD\u517c\u5bb9\u6027<\/strong><\/td>\n<td>\u539f\u751fAPI\uff0c\u652f\u6301GitHub Actions\u3001GitLab CI<\/td>\n<td>\u53ef\u901a\u8fc7\u6269\u5c55\u5b9e\u73b0\uff0c\u4f46\u914d\u7f6e\u590d\u6742<\/td>\n<p>&lt;td<\/p>\n","protected":false},"excerpt":{"rendered":"<p>2026\u5e746\u6708\uff0c\u4f60\u7684\u7f51\u7ad9\u53ef\u80fd\u6b63\u66b4\u9732\u572813\u4e2a\u9ad8\u5371CVE\u4e4b\u4e0b \u5c31\u5728\u672c\u5468\uff0c\u5b89\u5168\u7814\u7a76\u793e\u533a\u8fde\u7eed\u62ab\u9732\u4e86\u5173\u4e8eApache T [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":6690,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-6689","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-web360"],"_links":{"self":[{"href":"https:\/\/blog.lss.lol\/index.php\/wp-json\/wp\/v2\/posts\/6689","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.lss.lol\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.lss.lol\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.lss.lol\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.lss.lol\/index.php\/wp-json\/wp\/v2\/comments?post=6689"}],"version-history":[{"count":0,"href":"https:\/\/blog.lss.lol\/index.php\/wp-json\/wp\/v2\/posts\/6689\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.lss.lol\/index.php\/wp-json\/wp\/v2\/media\/6690"}],"wp:attachment":[{"href":"https:\/\/blog.lss.lol\/index.php\/wp-json\/wp\/v2\/media?parent=6689"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.lss.lol\/index.php\/wp-json\/wp\/v2\/categories?post=6689"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.lss.lol\/index.php\/wp-json\/wp\/v2\/tags?post=6689"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}