Baja
CVE-2026-11477
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.072
Restablecer filtros
Baja
CVE-2026-11470
hsweb-framework has a Path Traversal issue
Baja
CVE-2026-9088
Keycloak: Information disclosure due to user profile permission bypass
Crítica
CVE-2026-50076
Apache Fory Java SDK Has Deserialization of Untrusted Data in the Java replace-resolve path
Media
CVE-2026-47672
epa4all-client: Unauthenticated REST API for Patient Record Writes
Crítica
CVE-2026-47065
Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass
Media
CVE-2026-46718
Apache Calcite is Vulnerable to Use of Externally-Controlled Input to Select Classes
Media
CVE-2026-40989
Spring Cloud Function Context has Uncontrolled Recursion
Media
CVE-2026-40990
Spring Cloud Function Context: Uncontrolled Recursion is possible while attempting to add infinite amount of functions to Function Registry
Baja
CVE-2026-10532
Logback vulnerable to Object Injection through HardenedObjectInputStream modules
Media
CVE-2026-49328
Apache Fesod is vulnerable to Server-Side Request Forgery through its UrlImageConverter component
Media
CVE-2026-49270
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability
Alta
CVE-2026-48827
Apache MINA SSHD bundle sshd-git has a path traversal vulnerability
Media
CVE-2026-46605
Apache ActiveMQ server has an incomplete authorization workflow
Alta
CVE-2026-49157
Apache ActiveMQ has an Incorrect Default Permissions vulnerability
Alta
CVE-2026-49361
Apache Fluss: Unauthenticated remote attackers can exhaust JVM heap memory using crafted frame headers via TabletServer/CoordinatorServer
Alta
CVE-2026-45505
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
Alta
CVE-2026-42588
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
Alta
CVE-2026-44825
Apache Solr has hardcoded credentials in the Basic Authentication setup tool
Media
CVE-2026-42253
Apache ActiveMQ, Apache ActiveMQ Web have a Cross-site Scripting issue
Alta
CVE-2026-35563
Apache Directory LDAP API lacks server certificate verification for LDAP hostnames
Alta
CVE-2026-47695
CC-Tweaked has an SSRF Protection Bypass with NAT64
Media
CVE-2026-40914
Apache Artemis has an Incorrect Authorization issue
Baja
CVE-2026-9828
QOS.CH Sarl logback logback-core has a deserialization of untrusted data vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.