Media
CVE-2026-32046
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 14
Restablecer filtros
Media
CVE-2026-28480
OpenClaw Telegram allowlist authorization accepted mutable usernames
Alta
CVE-2026-28469
OpenClaw Google Chat shared-path webhook target ambiguity allowed cross-account policy-context misrouting
Alta
CVE-2026-26317
OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints
Alta
CVE-2026-28478
OpenClaw affected by denial of service via unbounded webhook request body buffering
Media
CVE-2026-28452
OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR)
Media
CVE-2026-29612
OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks
Alta
CVE-2026-29609
OpenClaw affected by denial of service via unbounded URL-backed media fetch
Media
CVE-2026-26328
OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities
Baja
ghsa-chm2-m3w2-wcxm
OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch
Alta
CVE-2026-28465
OpenClaw optional voice-call plugin: webhook verification may be bypassed behind certain proxy configurations
Alta
CVE-2026-25157
OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand
Alta
CVE-2026-25253
OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl
Alta
CVE-2026-24763
OpenClaw/Clawdbot Docker Execution has Authenticated Command Injection via PATH Environment Variable
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.