Media
CVE-2026-25306
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.600
Media
CVE-2026-25461
Listeo-Core - Directory Plugin by Purethemes <= 2.0.21 - Reflected Cross-Site Scripting
Alta
CVE-2026-32813
Admidio has a Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)
Media
CVE-2026-32818
Admidio is Missing Authorization on Forum Topic and Post Deletion
Media
CVE-2026-32757
Admidio has an HTMLPurifier Bypass in eCard Message Allows HTML Email Injection
Crítica
CVE-2026-32817
Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion
Media
CVE-2026-32812
Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpoint
Media
CVE-2026-32755
Admidio is Missing CSRF Protection on Role Membership Date Changes
Media
CVE-2026-32816
Admidio is Missing CSRF Validation on Role Delete, Activate, and Deactivate Actions
Alta
CVE-2026-32756
File Upload(RCE) Vulnerability in admidio
Media
CVE-2026-33572
OpenClaw session transcript files were created without forced user-only permissions
Alta
CVE-2026-32917
OpneClaw accepts unsanitized iMessage attachment paths which allowed SCP remote-path command injection
Alta
CVE-2026-32980
OpenClaw Telegram webhook request bodies were read before secret validation, enabling unauthenticated resource exhaustion
Alta
CVE-2026-32987
OpenClaw bootstrap setup codes could be replayed to escalate pending pairing scopes before approval
Media
CVE-2026-32982
OpenClaw Telegram media fetch errors exposed bot tokens in logged file URLs
Alta
CVE-2026-32728
Parse Server has a stored XSS filter bypass via Content-Type MIME parameter and missing XML extension blocklist entries
Alta
CVE-2026-32268
Azure Blob Storage for Craft CMS Potential Sensitive Information Disclosure vulnerability
Alta
CVE-2026-32267
Craft CMS Vulnerable to Privilege Escalation/Bypass through UsersController->actionImpersonateWithToken()
Alta
CVE-2026-28490
Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle
Alta
CVE-2026-28498
Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding
Baja
CVE-2026-32266
Google Cloud Storage for Craft CMS has an Information Disclosure Vulnerability
Media
CVE-2026-32265
Amazon S3 for Craft CMS has an Information Disclosure vulnerability
Alta
CVE-2026-32264
Craft CMS vulnerable to behavior injection RCE ElementIndexesController and FieldsController
Alta
CVE-2026-32263
Craft CMS vulnerable to behavior injection RCE via EntryTypesController
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.