Media
CVE-2026-42458
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 400
Restablecer filtros
Media
CVE-2026-42207
Magento LTS Vulnerable to Open Redirect via Unvalidated `uenc` Parameter in `stockAction()`
Crítica
CVE-2026-42155
Magento LTS has Weak API Session ID — Predictable MD5 of Time-Derived Inputs
Alta
CVE-2026-40488
OpenMage LTS: Customer File Upload Extension Blocklist Bypass → Remote Code Execution
Media
CVE-2026-40098
OpenMage LTS: Cross-user wishlist import leads to private option & file disclosure
Media
CVE-2026-25525
OpenMage LTS has a Path Traversal Filter Bypass in Dataflow Module
Alta
CVE-2026-25524
OpenMage LTS: Phar Deserialization leads to Remote Code Execution
Media
CVE-2026-25523
Magento's X-Original-Url header can expose admin url
Media
ghsa-595p-g7xc-c333
Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling
Media
CVE-2025-64174
OpenMage vulnerable to XSS in Admin Notifications
Alta
CVE-2025-54264
Magento vulnerable to stored Cross-Site Scripting (XSS)
Alta
CVE-2025-54263
Magento provides incorrect authorization through a security feature bypass
Media
CVE-2025-54267
Magento vulnerable to privilege escalation due to incorrect authorization
Media
CVE-2025-54266
Magento vulnerable to stored Cross-Site Scripting (XSS)
Media
CVE-2025-54265
Magento allows incorrect authorization
Crítica
Explotada en ataques
CVE-2025-54236
Magento Community Edition Improper Input Validation vulnerability
Alta
CVE-2025-49555
Magento Cross-Site Request Forgery (CSRF) vulnerability
Media
CVE-2025-49558
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
Alta
CVE-2025-49554
Magento vulnerable to denial of service
Media
CVE-2025-49559
Magento vulnerable to path traversal
Alta
CVE-2025-49556
Magento has incorrect authorization issue that leads to arbitrary file system read
Alta
CVE-2025-49557
Magento Cross-site Scripting vulnerability
Baja
CVE-2025-49549
Magento Authenticated Security feature bypass
Media
CVE-2025-49550
Magento Security feature bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.