Media
CVE-2026-45016
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.216
Restablecer filtros
Alta
CVE-2026-40187
EGroupware has Authenticated RCE via Malicious eTemplate Upload
Crítica
CVE-2026-27823
EGroupware has a Remote Code Execution Vulnerability
Media
CVE-2026-55793
Craft CMS: Stored XSS via Structure entry title in table view
Media
CVE-2026-55792
Craft CMS: Sensitive File Disclosure / Server-Side File Read
Crítica
CVE-2026-52889
Formie Hidden field defaults vulnerable to Server-Side Template Injection
Crítica
CVE-2026-9559
Mautic vulnerable to Path Traversal via Campaign Import
Crítica
CVE-2026-9558
Mautic has Server-Side Template Injection (SSTI) in Theme Templates
Media
CVE-2026-9557
Mautic Focus component Vulnerable to SSRF
Media
CVE-2026-90935
Froxlor customer can create MySQL databases on disallowed servers via Mysqls.add API
Media
CVE-2026-90936
Froxlor: Authenticated customers can read other customers' allowed sender aliases
Media
ghsa-2wwr-9x6f-88gp
EasyAdminBundle has path traversal and reflected XSS in Flag and Icon Twig components
Sin evaluar
CVE-2026-58588
drupal/canvas - SA-CONTRIB-2026-066
Media
CVE-2026-48806
Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys
Alta
CVE-2026-47198
Paymenter has URL parameter injection that bypasses paid plan limits at checkout
Baja
CVE-2026-54244
Statamic CMS's incorrect authorization lets view-only users submit Live Preview content reserved for editors
Media
CVE-2026-54243
Statamic Vulnerable to CSV formula injection in form submission exports
Media
CVE-2026-54242
Statamic Vulnerable to Server-Side Request Forgery via Glide (DNS rebinding)
Media
CVE-2026-49359
PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option
Alta
CVE-2026-49286
PhpWeasyPrint vulnerable to PHAR deserialization via output filename (CVE-2023-28115 case-insensitive bypass)
Baja
CVE-2026-49262
Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxy
Media
CVE-2026-48820
CakePHP: View::element() is missing a path containment check
Alta
CVE-2026-48979
PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smuggling
Media
ghsa-j7f5-gfqm-pcx3
Pterodactyl Panel: Client email change endpoint allows enumeration of accounts in system
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.