Alta
CVE-2026-2466
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Baja
CVE-2026-32109
Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`
Baja
CVE-2026-32108
Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access
Alta
CVE-2026-26127
.NET Denial of Service Vulnerability
Alta
CVE-2026-26130
.NET Denial of Service Vulnerability
Alta
CVE-2026-31958
Tornado is vulnerable to DoS due to too many multipart parts
Crítica
CVE-2026-31900
Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from
Media
CVE-2026-32094
Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash
Alta
CVE-2026-26131
.NET Elevation of Privilege Vulnerability
Alta
CVE-2026-31889
Shopware vulnerable to a potential take over of app credentials
Media
CVE-2026-31888
Shopware has user enumeration via distinct error codes on Store API login endpoint
Alta
CVE-2026-31887
Shopware: Unauthenticated data extraction possible through store-api.order endpoint
Media
CVE-2026-3429
Keycloak: Improper Access Control Leading to MFA Deletion and Account Takeover in Keycloak Account REST API
Sin evaluar
CVE-2026-4933
drupal/unpublished_node_permissions - SA-CONTRIB-2026-029
Sin evaluar
CVE-2026-3573
drupal/ai - SA-CONTRIB-2026-028
Baja
CVE-2026-56381
Craft CMS Vulnerable to Stored XSS via User Group Name in User Permissions Page
Alta
CVE-2026-31857
CraftCMS has an RCE vulnerability via relational conditionals in the control panel
Alta
CVE-2026-31839
Striae has a hash validation utility vulnerability
Alta
CVE-2026-31834
Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks
Media
CVE-2026-31833
Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering
Alta
CVE-2026-3657
My Sticky Bar <= 2.8.6 - Unauthenticated SQL Injection via 'stickymenu_contact_lead_form' Action
Media
CVE-2026-3226
LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering
Baja
CVE-2026-3911
Keycloak: Information disclosure of disabled user attributes via administrative endpoint
Alta
CVE-2026-31975
@siteboon/claude-code-ui Vulnerable to Unauthenticated RCE via WebSocket Shell Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.