Media
CVE-2026-39315
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2026-34983
Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be trigg
Media
CVE-2026-40046
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT vulnerable to Integer Overflow or Wraparound
Alta
CVE-2026-34020
Apache OpenMeetings Uses GET Request Method With Sensitive Query Strings
Media
CVE-2026-33005
Apache OpenMeetings has an Improper Handling of Insufficient Privileges vulnerability
Alta
CVE-2026-33266
Apache OpenMeetings Uses Hard-coded Cryptographic Key
Alta
CVE-2026-39980
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage
Alta
CVE-2026-39981
AGiXT Vulnerable to Path Traversal in safe_join()
Media
CVE-2026-42420
OpenClaw: Multiple Code Paths Missing Base64 Pre-Allocation Size Checks
Media
CVE-2026-42428
OpenClaw B-M3: ClawHub package downloads are not enforced with integrity verification
Alta
CVE-2026-40037
OpenClaw: `fetchWithSsrFGuard` replays unsafe request bodies across cross-origin redirects
Media
ghsa-w9j9-w4cp-6wgr
OpenClaw Host-Exec Environment Variable Injection
Media
CVE-2026-42430
OpenClaw: Strict browser SSRF bypass in Playwright redirect handling leaves private targets reachable
Baja
CVE-2026-42429
OpenClaw: Gateway plugin HTTP `auth: gateway` widens identity-bearing `operator.read` requests into runtime `operator.write`
Media
CVE-2026-41912
OpenClaw has Browser SSRF Policy Bypass via Interaction-Triggered Navigation
Media
CVE-2026-42426
OpenClaw `node.pair.approve` placed in `operator.write` scope instead of `operator.pairing` allows unprivileged pairing approval
Baja
CVE-2026-41911
OpenClaw: Feishu docx upload_file/upload_image Bypasses Workspace-Only Filesystem Policy (GHSA-qf48-qfv4-jjm9 Incomplete Fix)
Media
CVE-2026-41914
OpenClaw QQ Bot Extension missing SSRF Protection on All Media Fetch Paths
Media
CVE-2026-42421
OpenClaw: Existing WS sessions survive shared gateway token rotation
Baja
CVE-2026-41913
OpenClaw: Concurrent async auth attempts can bypass the intended shared-secret rate-limit budget on Tailscale-capable paths
Alta
CVE-2026-42432
OpenClaw: Node Pairing Reconnect Command Escalation Bypasses operator.admin Scope Requirement
Media
CVE-2026-41910
OpenClaw: /allowlist omits owner-only enforcement for cross-channel allowlist writes
Media
CVE-2026-41916
OpenClaw: resolvedAuth closure becomes stale after config reload
Media
CVE-2026-42431
OpenClaw `node.invoke(browser.proxy)` bypasses `browser.request` persistent profile-mutation guard
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.