Alta
CVE-2026-61814
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Alta
CVE-2026-59990
Jawn: Uncontrolled nesting depth in JSON parser
Media
CVE-2026-15731
WP Multilang – Translation and Multilingual Plugin <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
Crítica
CVE-2026-12227
Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter
Alta
CVE-2026-85682
YOP Poll <= 7.0.10 - Unauthenticated Origin Validation Error to Administrator Account Takeover via '/auth/wp-login-redirect' REST Route
Alta
CVE-2026-77193
eesy_ID2WP – Publish InDesign HTML5 <= 1.0.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'id2wp_path' Query Parameter
Sin evaluar
pysec-2026-3987
MemoryOS 2.0.34 was published with a credential-stealing binary
Media
CVE-2026-96826
W4 Post List <= 3.0.6 - Authenticated (Editor+) SQL Injection
Alta
CVE-2026-76087
Formie: Unauthenticated users can overwrite incomplete submissions via submit action
Alta
CVE-2026-76086
Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials
Media
CVE-2026-92692
Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)
Media
CVE-2026-77421
JLine: ReDoS in Nano Editor Regex Search Mode
Alta
CVE-2026-77422
JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping
Alta
CVE-2026-56679
9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade
Media
CVE-2026-56678
9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding
Alta
CVE-2026-56676
9router: Image prefetch DNS rebinding allows SSRF to internal services
Alta
CVE-2026-56675
9router /v1 APIs has unauthenticated access via reverse proxy locality collapse
Media
CVE-2026-77420
JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable
Sin evaluar
CVE-2026-96382
drupal/diba_carousel - SA-CONTRIB-2026-191
Sin evaluar
CVE-2026-96386
drupal/smart_content - SA-CONTRIB-2026-190
Sin evaluar
CVE-2026-96380
drupal/css_usage_analyzer - SA-CONTRIB-2026-189
Sin evaluar
CVE-2026-96377
drupal/combined_image_style - SA-CONTRIB-2026-188
Sin evaluar
CVE-2026-96392
drupal/ai_ckeditor - SA-CONTRIB-2026-187
Sin evaluar
CVE-2026-96391
drupal/webform_rest - SA-CONTRIB-2026-186
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.