Alta
CVE-2026-10721
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 121
Restablecer filtros
Alta
CVE-2026-7888
Concrete CMS is vulnerable to PHP Object Injection via unserialize() calls in the Workflow, Form block, and File/Set components
Baja
CVE-2026-8347
Concrete CMS is vulnerable to IDOR + wrong-authorization-level in the Express association Reorder dialog
Baja
CVE-2026-8340
Concrete CMS is vulnerable to CSRF via Backend\File::approveVersion
Baja
CVE-2026-8353
Concrete CMS is vulnerable to Stored XSS via page name in the Atomik theme
Baja
CVE-2026-8416
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file addFavoriteFolder($id)
Baja
CVE-2026-8413
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/design
Media
CVE-2026-8245
Concrete CMS is Vulnerable to Reflected XSS in Legacy Pagination
Baja
CVE-2026-8432
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file star()
Media
CVE-2026-8337
Concrete CMS is vulnerable to IDOR in surveys
Baja
CVE-2026-8409
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/delete
Baja
CVE-2026-8435
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file approveVersion()
Baja
CVE-2026-8412
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/cache
Baja
CVE-2026-8410
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/delete
Baja
CVE-2026-8415
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/association/reorder
Baja
CVE-2026-8414
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicate
Baja
CVE-2026-8411
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/delete
Baja
CVE-2026-8433
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan()
Baja
CVE-2026-8434
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescanMultiple()
Baja
CVE-2026-8427
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFavoriteFolder($id)
Media
CVE-2026-8237
Concrete CMS is vulnerable to IDOR
Media
CVE-2026-8240
Concrete CMS is vulnerable to unauthenticated page metadata disclosure
Media
CVE-2026-8238
Concrete CMS is vulnerable to IDOR
Baja
CVE-2026-7886
Concrete CMS is vulnerable to IDOR in AddMessage/UpdateMessage
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.