Alta
CVE-2026-29069
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 127
Restablecer filtros
Media
CVE-2026-28784
Craft CMS has potential authenticated Remote Code Execution via Twig SSTI
Media
CVE-2026-28782
Craft CMS has Permission Bypass and IDOR in Duplicate Entry Action
Media
CVE-2026-28783
Craft CMS has Twig Function Blocklist Bypass
Media
CVE-2026-28781
Craft CMS: Entries Authorship Spoofing via Mass Assignment
Crítica
CVE-2026-28697
Craft CMS Vulnerable to Authenticated RCE via "craft.app.fs.write()" in Twig Templates
Baja
CVE-2026-56393
Craft CMS Vulnerable to Stored XSS in Settings Names and Field Options
Alta
CVE-2026-28696
Craft CMS has IDOR via GraphQL @parseRefs
Media
CVE-2026-28695
Craft CMS Vulnerable to Authenticated RCE via Twig SSTI - create() function + Symfony Process gadget
Baja
CVE-2026-56383
Craft CMS has Stored XSS in Table Field in its "Row Heading" Column Type
Media
CVE-2026-27129
Craft CMS: Cloud Metadata SSRF Protection Bypass via IPv6 Resolution
Media
CVE-2026-27128
Craft CMS Race condition in Token Service potentially allows for token usage greater than the token limit
Alta
CVE-2026-27127
Craft CMS has Cloud Metadata SSRF Protection Bypass via DNS Rebinding
Media
CVE-2026-27126
Craft CMS has Stored XSS in Table Field via "HTML" Column Type
Alta
CVE-2026-25498
Craft CMS Vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior
Alta
CVE-2026-25497
Craft CMS: GraphQL Asset Mutation Privilege Escalation
Media
CVE-2026-25496
Craft CMS Vulnerable to Stored XSS in Number Prefix & Suffix Fields
Alta
CVE-2026-25495
Craft CMS Vulnerable to SQL Injection in Element Indexes via `criteria[orderBy]`
Media
CVE-2026-25494
Craft CMS Vulnerable to SSRF in GraphQL Asset Mutation via Alternative IP Notation
Media
CVE-2026-25493
Craft CMS Vulnerable to SSRF in GraphQL Asset Mutation via HTTP Redirect
Baja
CVE-2026-25491
Craft CMS Vulnerable to Stored XSS in Entry Types Name
Alta
CVE-2025-68455
Craft CMS vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior
Alta
CVE-2025-68456
Unauthenticated Craft CMS users can trigger a database backup
Media
CVE-2025-68454
Craft CMS vulnerable to potential authenticated Remote Code Execution via Twig SSTI
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.