Baja
CVE-2026-32588
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Crítica
CVE-2026-33439
OpenIdentityPlatform OpenAM: Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAM
Alta
CVE-2026-35554
Apache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race Condition
Media
CVE-2026-33227
Apache ActiveMQ: Improper validation and restriction of a classpath path name
Baja
CVE-2026-37977
Keycloak vulnerable to information disclosure via CORS header injection due to unvalidated JWT azp claim
Alta
ghsa-2m67-wjpj-xhg9
Jackson Core: Document length constraint bypass in blocking, async, and DataInput parsers
Alta
CVE-2026-4636
Keycloak: UMA Policy Resource Injection Allows Unauthorized Cross-User Permission Grants
Media
CVE-2026-34237
MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)
Crítica
CVE-2026-34361
FHIR Validator HTTP service has SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft
Media
CVE-2026-34360
FHIR Validator: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network Probing
Alta
CVE-2026-34359
HAPI FHIR Core has Authentication Credential Leakage via Improper URL Prefix Matching on HTTP Redirect
Alta
CVE-2026-34214
Trino: Iceberg REST catalog static and vended credentials are accessible via query JSON
Alta
ghsa-443w-3rq3-5m5h
AWS SDK for Java 2.0: Improper Handling of Special Characters in CloudFront Signing Utilities
Alta
CVE-2026-28367
Undertow is Vulnerable to HTTP Request/Response Smuggling
Alta
CVE-2026-22744
Spring AI Redis Store has TAG Field Query Injection Through Improper Neutralization of Special Characters
Alta
CVE-2026-22742
Spring AI: Insufficient Validation causes SSRF when processing multimodal messages with user-supplied URLs
Alta
CVE-2026-22743
Spring AI has a Cypher Injection vulnerability in Neo4jVectorFilterExpressionConverter
Crítica
CVE-2026-22738
Spring AI: SpEL injection is triggered when a user-supplied value is used as a filter expression key
Media
CVE-2026-3121
Keycloak: manage-clients permission escalates to full realm admin access
Media
CVE-2026-3190
Keycloak: Missing Role Enforcement on UMA 2.0 Permission Ticket Endpoint Leads to Information Disclosure
Alta
CVE-2026-33871
Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass
Alta
CVE-2026-33870
Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
Crítica
ghsa-h8w2-rv57-vc6f
splunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code Execution
Crítica
CVE-2026-33728
dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.