Crítica
CVE-2026-40982
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 278
Restablecer filtros
Alta
CVE-2026-40981
Spring Cloud Config has an Authorization Bypass Through User-Controlled Key
Media
CVE-2026-42581
Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization
Alta
CVE-2026-42579
Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)
Alta
ghsa-mggx-p7jf-jgw4
jdbi3-freemarker Vulnerable to Improper Neutralization of Special Elements Used in FreeMarker Template Engine
Baja
CVE-2026-42188
Geyser Vulnerable to Server-Side Request Forgery (SSRF) via Player Head Texture URL in Geyser
Media
CVE-2026-41417
Netty: Start-Line Injection in DefaultHttpRequest.setUri() Allows HTTP Request Smuggling and RTSP Request Injection
Media
CVE-2026-30139
Silverpeas Core has a reflected cross-site scripting vulnerability
Alta
CVE-2026-5795
Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables
Alta
CVE-2026-35582
Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix
Media
CVE-2026-35565
Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata
Baja
CVE-2026-6125
Warm-Flow has a SpEL Expression Injection in SpelHelper.parseExpression
Alta
CVE-2026-22750
Spring Cloud Gateway's SSL bundle configuration silently bypassed
Alta
CVE-2026-24880
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability
Crítica
CVE-2026-35580
Emissary has GitHub Actions Shell Injection via Workflow Inputs
Media
CVE-2026-35571
Emissary has Stored XSS via Navigation Template Link Injection
Alta
CVE-2026-28368
Undertow is Vulnerable to HTTP Request/Response Smuggling
Alta
CVE-2026-33870
Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
Media
CVE-2026-32948
sbt: Source dependency feature (via crafted VCS URL) leads to arbitrary code execution on Windows
Baja
CVE-2025-11143
org.eclipse.jetty:jetty-http has different parsing of invalid URIs
Alta
CVE-2026-1605
The Eclipse Jetty Server Artifact has a Gzip request memory leak
Media
CVE-2025-66168
Apache ActiveMQ is Vulnerable to Integer Overflow or Wraparound
Baja
CVE-2026-1337
Neo4j Enterprise and Community editions have insufficient escaping of unicode characters in query log
Media
CVE-2026-1622
Neo4j Enterprise and Community vulnerable to a potential information disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.