Media
CVE-2026-70657
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.824
Restablecer filtros
Media
CVE-2026-68923
MobSF's CSRF checks not enforced after Django migration
Media
CVE-2026-68520
Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config
Media
CVE-2026-53708
ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
Alta
CVE-2026-68519
Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)
Media
CVE-2026-73559
vLLM: Completion prompt lists fan out into unbounded engine requests
Media
CVE-2026-59894
sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes
Alta
CVE-2026-68518
Glances has a command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction
Media
CVE-2026-68517
Glances: REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard
Alta
CVE-2026-62982
Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection
Alta
CVE-2026-55071
MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`
Alta
CVE-2026-55074
Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)
Media
CVE-2026-73416
JupyterLab: PyPI extension blocklist package-name canonicalization bypass
Alta
CVE-2026-73415
JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
Alta
CVE-2026-73417
JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
Alta
CVE-2026-73568
libp2p: yamux connection DoS via oversized data frame
Alta
CVE-2026-73652
vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
Media
CVE-2026-9318
tablib: Stored XSS in the HTML export via unescaped dataset title
Crítica
CVE-2026-64825
Home Assistant Core vulnerable to Path Traversal via backup upload during onboarding
Crítica
CVE-2026-61459
mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials
Alta
CVE-2026-52776
compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0
Alta
CVE-2026-73498
mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment
Baja
CVE-2026-10775
SGLang is Vulnerable to DoS via the data_hash Function
Alta
CVE-2026-55178
GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.