Media
CVE-2026-57786
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.538
Media
CVE-2026-57779
Fascinate <= 1.1.5 - Missing Authorization
Alta
CVE-2026-57791
Brook - Agency Business Creative WordPress Theme <= 2.9.0 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2026-57766
WPIDE – File Manager & Code Editor <= 3.5.6 - Cross-Site Request Forgery
Media
CVE-2026-14306
Tutor LMS <= 3.9.13 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2026-57765
Shopping Cart & eCommerce Store <= 5.9.1 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-57755
Mosaic Gallery – Advanced Gallery <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-57783
Speaker <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2026-57790
Billey <= 2.1.8 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2026-57760
Sendcloud Shipping <= 1.0.31 - Missing Authorization
Media
CVE-2026-57778
Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization
Alta
CVE-2026-57804
TheGem Theme Elements <= 5.11.1 - Authenticated (Contributor+) Local File Inclusion
Sin evaluar
pysec-2026-611
Malicious code in uprobe (PyPI)
Media
CVE-2026-54262
Wagtail: Pages translations can be created without page permissions when using simple_translation
Media
CVE-2026-54260
Wagtail: Denial of service via unbounded filter specs in the image preview
Media
CVE-2026-54261
Wagtail: Improper permission handling in image preview
Media
CVE-2026-54259
Wagtail: Improper restriction handling on Documents and Images chosen endpoints
Alta
CVE-2026-54263
Wagtail: Reflected XSS in dynamic image URL generator view
Media
CVE-2026-62208
OpenClaw MCP SSE redirects could forward Authorization headers
Sin evaluar
pysec-2026-610
Malicious code in ufish (PyPI)
Alta
CVE-2026-50143
Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token
Crítica
CVE-2026-53943
Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header
Alta
CVE-2026-53712
OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms
Alta
CVE-2026-49119
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplyi
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.