Alta
CVE-2026-7504
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Alta
CVE-2026-7507
Keycloak: Session fixation in OIDC login flow that can lead to account takeover
Alta
CVE-2026-7571
Keycloak: Access token disclosure and implicit flow bypass via forged client data
Baja
CVE-2026-7860
Vaadin Build Plugins is Affected by a Possible Information Disclosure Vulnerability
Media
CVE-2026-4630
Keycloak Protection API allows authenticated clients to access and modify resources owned by other Resource Servers
Alta
CVE-2026-7307
Keycloak: Denial of Service via specially crafted SAML input
Media
CVE-2026-37981
Keycloak Account Resources user lookup contains broken access control
Media
CVE-2026-37982
Keycloak: Unauthorized account takeover via WebAuthn token replay
Media
CVE-2026-37979
Keycloak: Information disclosure via OIDC token introspection endpoint audience bypass
Media
CVE-2026-37978
Keycloak: Information Disclosure via evaluate-scopes Admin API
Alta
CVE-2026-8727
TYPO3 Remote Code Execution in extension "Site Crawler" (crawler)
Alta
CVE-2026-8726
georgringer/news has SQL Injection in extension "News system" (news)
Media
CVE-2026-46722
TYPO3 ke_search XML External Entity Injection
Media
CVE-2026-46724
TYPO3 ke_search path traversal due to lack of normalization on config directory from file indexer
Media
CVE-2026-46723
TYPO3 ke_search path traversal from arbitrary table configuration input
Alta
CVE-2026-8827
TYPO3 SQL Injection in extension "Address List" (tt_address)
Media
CVE-2026-46721
TYPO3 sf_register extension allows unauthorized assignment of frontend user groups
Crítica
CVE-2026-46725
TYPO3 Remote Code Execution in extension "Content Element Selector" (ceselector)
Alta
CVE-2026-3985
Creative Mail – Easier WordPress & WooCommerce Email Marketing <= 1.6.9 - Unauthenticated SQL Injection via 'checkout_uuid' Parameter
Media
CVE-2026-8610
TypeSquare Webfonts for ConoHa <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via 'fontThemeUseType' Parameter
Media
CVE-2026-7472
Read More & Accordion <= 3.5.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Alta
CVE-2026-7467
Read More & Accordion <= 3.5.7 - Privilege Escalation via importData
Media
CVE-2026-6549
Logo Manager For Enamad <= 0.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute
Media
CVE-2026-8627
Correct Prices <= 1.0 - Reflected Cross-Site Scripting via PHP_SELF Parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.