Crítica
CVE-2026-91130
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 15
Restablecer filtros
Media
CVE-2026-91129
Home Assistant: mDNS Server-Side Request Forgery
Crítica
CVE-2026-64825
Home Assistant Core vulnerable to Path Traversal via backup upload during onboarding
Media
CVE-2026-40602
Home Assistant Command-line Interface: Handling of user-supplied Jinja2 templates
Baja
CVE-2026-33045
Home Assistant has stored XSS in history-graphs
Baja
CVE-2026-33044
Home Assistant has stored XSS in Map-card through malicious device name
Media
CVE-2026-32111
ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle
Media
ghsa-q855-8rh5-jfgq
ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path
Media
CVE-2025-65713
Home Assistant Core before is vulnerable to Directory Traversal
Alta
CVE-2025-62172
Home Assistant has Stored XSS vulnerability in Energy dashboard from Energy Entity Name
Alta
CVE-2025-25305
Home Assistant does not correctly validate SSL for outgoing requests in core and used libs
Media
CVE-2023-50715
User accounts disclosed to unauthenticated actors on the LAN
Alta
CVE-2026-54317
Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LAN
Media
CVE-2023-41893
Home Assistant vulnerable to account takeover via auth_callback login
Alta
CVE-2018-21019
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.