Alta
CVE-2026-55416
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 138
Restablecer filtros
Crítica
CVE-2026-55634
Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name
Crítica
CVE-2026-55220
Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column (PHP Object Injection, CWE-502)
Alta
CVE-2026-55212
Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation
Alta
CVE-2026-55072
Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name
Alta
CVE-2026-11407
Pimcore CMS Twig Sandbox Bypass via SecurityPolicy checkMethodAllowed
Alta
CVE-2026-5394
Pimcore Platform - SQL Injection in DataObject composite index handling during class definition import/save
Alta
CVE-2026-45704
Pimcore has a CustomReports Share Bypass
Media
CVE-2026-45703
Pimcore has a WordExport Authorization Bypass for Unauthorized Document Export
Alta
CVE-2026-45260
Pimcore: Missing Authorization in WebDAV MOVE via unchecked asset move handling
Alta
CVE-2026-45162
Pimcore has Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction
Alta
CVE-2026-44739
Pimcore Vulnerable to SQL Injection in Custom Reports Column Configuration
Media
CVE-2026-5362
Pimcore has an authenticated Cross-site Scripting issue
Media
CVE-2026-27461
Pimcore vulnerable to SQL injection via unsanitized filter value in Dependency Dao RLIKE clause
Media
CVE-2026-23494
Pimcore is Vulnerable to Broken Access Control: Missing Function Level Authorization on "Static Routes" Listing
Alta
CVE-2026-23493
Pimcore ENV Variables and Cookie Informations are exposed in http_error_log
Alta
CVE-2026-23492
Pimcore Has an Incomplete Patch for CVE-2023-30848
Media
CVE-2025-27617
Pimcore Vulnerable to SQL Injection in getRelationFilterCondition
Alta
CVE-2024-11954
Pimcore Authenticated Stored Cross-Site Scripting (XSS) Via Search Document
Alta
ghsa-hq76-662x-7mw4
Pimcore includes vulnerable PHPOffice/PhpSpreadsheet
Media
CVE-2024-41109
Pimcore vulnerable to disclosure of system and database information behind /admin firewall
Alta
CVE-2024-32871
Flooding Server with Thumbnail files
Media
ghsa-vjwg-28gv-pm8h
Pimcore TinyMCE Bundle - tinymce CVE-2024-29203, CVE-2024-29881
Alta
CVE-2023-47637
Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.