Media
CVE-2026-35642
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2026-35647
OpenClaw: Matrix Verification Notices Bypass Matrix DM Policy and Reply to Unpaired DM Peers
Media
CVE-2026-35623
OpenClaw: BlueBubbles Webhook Missing Rate Limiting Enables Brute-Force Password Guessing
Alta
CVE-2026-35669
OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers
Crítica
CVE-2026-35625
OpenClaw: Silent privilege escalation via gateway shared-auth reconnect
Crítica
CVE-2026-35663
OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin
Alta
CVE-2026-34512
OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding
Media
CVE-2026-4923
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards
Alta
CVE-2026-4926
path-to-regexp vulnerable to Denial of Service via sequential optional groups
Alta
ghsa-mvm6-f9r3-fgfx
AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction
Alta
CVE-2026-33981
Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters
Crítica
CVE-2026-33873
Langflow has Authenticated Code Execution in Agentic Assistant Validation
Media
CVE-2026-2442
Pagelayer <= 2.0.7 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via 'email'
Alta
ghsa-443w-3rq3-5m5h
AWS SDK for Java 2.0: Improper Handling of Special Characters in CloudFront Signing Utilities
Media
CVE-2026-65914
DOMPurify is vulnerable to mutation-XSS via Re-Contextualization
Alta
CVE-2026-34076
Clerk: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host
Alta
ghsa-27qh-8cxx-2cr5
AWS SDK for PHP has CloudFront Policy Document Injection via Special Characters
Alta
CVE-2026-34046
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
Alta
CVE-2026-33989
@mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools
Alta
CVE-2026-33942
Saloon has insecure deserialization in AccessTokenAuthenticator
Alta
CVE-2026-28369
Undertow is Vulnerable to HTTP Request/Response Smuggling
Alta
CVE-2026-28368
Undertow is Vulnerable to HTTP Request/Response Smuggling
Alta
CVE-2026-28367
Undertow is Vulnerable to HTTP Request/Response Smuggling
Alta
CVE-2026-33941
Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.