Alta
CVE-2026-50645
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2026-50634
Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry
Crítica
CVE-2026-50633
Apache CXF JNDI Injection vulnerability in DispatchMDBMessageListenerImpl
Crítica
CVE-2026-49875
Apache CXF has Improper Restriction of XML External Entity Reference
Media
CVE-2026-50623
Apache CXF has Authentication Bypass in OAuth2 TokenIntrospectionService
Alta
CVE-2026-50629
Apache CXF OAuth2 Log Injection via Unsanitized Client Identifier
Crítica
CVE-2026-50628
Apache CXF OAuth2 has Inverted IP Binding Check that Defeats Security Control
Alta
CVE-2026-50631
Apache CXF OAuth2 TOCTOU Race Condition in Refresh Token Processing
Crítica
CVE-2026-50627
Apache CXF OAuth2 Missing JWT Audience and Issuer Validation in Access Token Validator
Media
CVE-2026-50630
Apache CXF OAuth2 HTTP Response Splitting via WWW-Authenticate Realm Injection
Media
CVE-2026-24618
Hash Elements <= 1.5.4 - Authenticated (Contributor+) Information Exposure
Alta
CVE-2026-46698
Fediverse Embeds <= 1.5.7 - Unauthenticated Server-Side Request Forgery
Alta
CVE-2025-69131
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Arbitrary File Download
Alta
CVE-2026-46697
Fediverse Embeds <= 1.5.7 - Unauthenticated Server-Side Request Forgery
Alta
CVE-2026-27400
BookPro <= 1.1.0 - Unauthenticated Arbitrary File Deletion
Alta
CVE-2026-52702
SEO Redirection Plugin – 301 Redirect Manager <= 9.17 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-27429
Nifty <= 1.4.1 - Unauthenticated PHP Object Injection
Crítica
CVE-2025-69129
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Arbitrary File Upload
Alta
CVE-2026-52706
JetEngine <= 3.8.10 - Unauthenticated PHP Object Injection
Media
CVE-2026-52703
FastDup – Fastest WordPress Migration & Duplicator <= 2.7.2 - Unauthenticated Path Traversal
Media
CVE-2026-8293
Really Simple Security <= 9.5.10.0 - Two Factor Authentication Bypass
Alta
CVE-2026-52707
Kastell <= 2.0 - Unauthenticated Local File Inclusion
Media
CVE-2026-53782
@steipete/summarize vulnerable to SSRF via podcast:transcript URL fetch
Media
CVE-2026-53781
@steipete/summarize is Vulnerable to Disk Exhaustion via Crafted Media Responses
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.