Alta
CVE-2026-9809
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.039
Restablecer filtros
Alta
CVE-2026-9808
Mautic has an Authorization Bypass in API v2 Endpoints
Crítica
CVE-2026-9559
Mautic vulnerable to Path Traversal via Campaign Import
Crítica
CVE-2026-9558
Mautic has Server-Side Template Injection (SSTI) in Theme Templates
Media
CVE-2026-9557
Mautic Focus component Vulnerable to SSRF
Alta
CVE-2026-4776
Mautic has SQL Injection in API Contact Filtering
Media
CVE-2026-90935
Froxlor customer can create MySQL databases on disallowed servers via Mysqls.add API
Media
CVE-2026-90936
Froxlor: Authenticated customers can read other customers' allowed sender aliases
Alta
CVE-2026-50284
Craft CMS: Missing peer-permission check in `AssetsController::actionDeleteFolder` allows deletion of other users' assets
Media
CVE-2026-50283
Craft CMS: Unauthorized Deletion of Source Assets During File Replacement
Media
CVE-2026-50280
Craft CMS: Authorization bypass in `entries/move-to-section` via missing target-section save check
Alta
CVE-2026-50279
Craft CMS: Authorship spoofing in `entries/save-entry` via pre-check/post-mutation authorization gap
Alta
CVE-2026-52854
mediawiki/maps has stored XSS through the overlays parameter in the display_map parser function
Baja
CVE-2026-80196
Kimai Password Reset Link Remains Valid After Password Change
Alta
CVE-2026-49981
Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`
Baja
ghsa-hwmc-r6mf-jh83
Schema.org has cross-site scripting (XSS) via script break-out in toScript() output
Media
ghsa-2wwr-9x6f-88gp
EasyAdminBundle has path traversal and reflected XSS in Flag and Icon Twig components
Sin evaluar
CVE-2026-58591
drupal/colorbox - SA-CONTRIB-2026-069
Sin evaluar
CVE-2026-58590
drupal/flowdrop - SA-CONTRIB-2026-068
Sin evaluar
CVE-2026-58589
drupal/flowdrop - SA-CONTRIB-2026-067
Sin evaluar
CVE-2026-58588
drupal/canvas - SA-CONTRIB-2026-066
Sin evaluar
CVE-2026-58587
drupal/canvas - SA-CONTRIB-2026-065
Media
CVE-2026-55219
Paymenter has race condition in payWithCredit() that enables credit double-spend
Media
CVE-2026-48808
Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.