Media
CVE-2026-32265
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.068
Restablecer filtros
Alta
CVE-2026-32264
Craft CMS vulnerable to behavior injection RCE ElementIndexesController and FieldsController
Alta
CVE-2026-32263
Craft CMS vulnerable to behavior injection RCE via EntryTypesController
Media
CVE-2026-32262
Craft CMS has a Path Traversal Vulnerability in AssetsController
Alta
CVE-2026-32261
RCE via SSTI for users with permissions to access the Craft CMS Webhooks plugin
Media
CVE-2026-4175
Aureus ERP vulnerable to cross-site scripting in the Chatter Message Handler
Media
CVE-2026-32612
Statamic vulnerable to privilege escalation via stored cross-site scripting
Alta
CVE-2026-32600
simplesamlphp/xml-security: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption
Alta
CVE-2026-32313
xmlseclibs: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption
Crítica
CVE-2026-27591
Winter vulnerable to privilege escalation by authenticated backend users
Alta
CVE-2026-31889
Shopware vulnerable to a potential take over of app credentials
Media
CVE-2026-31888
Shopware has user enumeration via distinct error codes on Store API login endpoint
Alta
CVE-2026-31887
Shopware: Unauthenticated data extraction possible through store-api.order endpoint
Sin evaluar
CVE-2026-4933
drupal/unpublished_node_permissions - SA-CONTRIB-2026-029
Sin evaluar
CVE-2026-3573
drupal/ai - SA-CONTRIB-2026-028
Baja
CVE-2026-56381
Craft CMS Vulnerable to Stored XSS via User Group Name in User Permissions Page
Alta
CVE-2026-31857
CraftCMS has an RCE vulnerability via relational conditionals in the control panel
Alta
CVE-2026-31858
CraftCMS's `ElementSearchController` Affected by Blind SQL Injection
Media
CVE-2026-31859
CraftCMS vulnerable to reflective XSS via incomplete return URL sanitization
Media
CVE-2026-31825
Sylius has a DQL Injection via API Order Filters
Alta
CVE-2026-31824
Sylius has a Promotion Usage Limit Bypass via Race Condition
Media
CVE-2026-31823
Sylius Vulnerable to Authenticated Stored XSS
Media
CVE-2026-31822
Sylius has a XSS vulnerability in checkout login form
Media
CVE-2026-31821
Sylius is Missing Authorization in API v2 Add Item Endpoint
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.