Media
CVE-2026-50009
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 361
Restablecer filtros
Alta
CVE-2026-50631
Apache CXF OAuth2 TOCTOU Race Condition in Refresh Token Processing
Media
CVE-2026-48040
netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access
Media
CVE-2026-47838
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
Baja
CVE-2026-41848
Spring Framework Denial of Service via AntPathMatcher
Alta
CVE-2026-45674
Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
Alta
CVE-2026-45416
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
Alta
CVE-2026-44250
Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays
Alta
CVE-2026-47695
CC-Tweaked has an SSRF Protection Bypass with NAT64
Crítica
CVE-2026-46562
Yamcs Vulnerable to Remote Code Execution via Mission Database algorithm override
Media
CVE-2026-44596
Yamcs has No Rate Limiting on Authentication Endpoint
Alta
CVE-2026-7504
Keycloak: Open redirect when using wildcard valid redirect URIs in Keycloak
Alta
CVE-2026-45367
HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
Alta
CVE-2026-45300
async-http-client: Cookie header not stripped on cross-origin redirect
Media
CVE-2026-45292
OpenTelemetry Java SDK has Unbounded Memory Allocation in W3C Baggage Propagation
Crítica
CVE-2026-45091
sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)
Crítica
CVE-2026-27478
Unity Catalog has a JWT Issuer Validation Bypass tht Allows Complete User Impersonation
Alta
CVE-2026-44714
bitcoinj has a ScriptExecution P2PKH/P2WPKH Verification Bypass
Media
CVE-2026-41004
Spring Cloud Config Server Logged Sensitive Information
Alta
CVE-2026-44503
Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect
Media
CVE-2026-42586
Netty Redis Codec Encoder has a CRLF Injection Issue
Media
CVE-2026-42585
Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding
Media
ghsa-248h-974q-xrc2
axonflow-sdk-java: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification
Crítica
CVE-2026-42555
Valtimo has SpEL injection via StandardEvaluationContext that allows Remote Code Execution by admin users
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.