Alta
CVE-2026-41670
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Alta
CVE-2026-41669
Admidio Ignores SAML Signature Validation Result, Processes Forged AuthnRequests and LogoutRequests
Baja
CVE-2026-41663
Admidio has CSRF on Admin Preferences that Triggers Unauthorized Backup, .htaccess Write, and Email Send
Media
CVE-2026-41662
Admidio Missing Minimum Administrator Check in Role Membership Removal
Media
CVE-2026-41661
Admidio vulnerable to reflected XSS in msg_window.php via Square Bracket to HTML Tag Conversion
Alta
CVE-2026-41660
Admidio has Inverted 2FA Reset Authorization Check that Lets Group Leaders Strip Admin TOTP
Baja
CVE-2026-41659
Admidio Leaks Hidden Profile Field Values via Blind Search Oracle in Member Assignment
Media
CVE-2026-41658
Admidio's Missing Authorization on Inventory Module Destructive Endpoints Allows Any Authenticated User to Delete Items
Media
CVE-2026-41657
Admidio Exposes Cross-Organization Member Data via Permission Check Mismatch in contacts_data.php
Media
CVE-2026-41656
Admidio has Path Traversal via Unvalidated `name` Parameter in Document Add Mode that Enables Arbitrary Server File Read
Media
CVE-2026-41655
Admidio has Path Traversal in ECard Preview that Allows Reading Arbitrary Server Files Including Database Credentials
Media
CVE-2026-44996
OpenClaw: Webchat audio embedding could read local files without local-root containment
Media
CVE-2026-44991
OpenClaw: Owner-enforced commands could accept wildcard channel senders as command owners
Crítica
CVE-2026-42232
n8n has XML Node Prototype Pollution that to RCE
Crítica
CVE-2026-42231
n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE
Alta
CVE-2026-42235
n8n Vulnerable to XSS via MCP OAuth client
Alta
CVE-2026-42226
n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay
Alta
CVE-2026-42234
n8n has a Python Task Runner Sandbox Escape Vulnerability
Media
CVE-2026-42227
n8n has Public API Variables IDOR that Allows Cross-Project Secret Disclosure
Alta
CVE-2026-42236
n8n Vulnerable to Unauthenticated Denial of Service via MCP Client Registration
Media
CVE-2026-42228
n8n Vulnerable to Hijacking of Unauthenticated Chat Execution
Media
CVE-2026-42229
n8n has SQL Injection in SeaTable Node
Media
CVE-2026-42230
n8n has Open Redirect in MCP OAuth Consent Flow
Media
CVE-2026-42233
n8n has SQL Injection in Oracle Database Node via Limit Field
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.