Media
CVE-2026-4805
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Baja
CVE-2026-7141
vLLM makes Use of Uninitialized Resource
Media
CVE-2026-6551
Timeline Blocks for Gutenberg <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute
Media
CVE-2026-6809
Social Post Embed <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Threads Embed
Media
CVE-2026-6725
WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute
Media
CVE-2026-41081
Apache Storm's Improper Handling of TLS Client Authentication Failure Leads to Anonymous Principal Assignment
Media
CVE-2026-40557
Apache Storm Prometheus Reporter vulnerable to Improper Certificate Validation via Global SSL Context Downgrade
Crítica
CVE-2026-33454
Apache Camel's Camel-Mail component is vulnerable to Camel message header injection
Crítica
CVE-2026-41409
Apache MINA Vulnerable to Deserialization of Untrusted Data (CVE-2024-52046 Incomplete Fix)
Alta
CVE-2026-40022
Apache Camel Vulnerable to Authentication Bypass Using an Alternate Path or Channel
Alta
CVE-2026-40858
Apache Camel-Infinispan Component Vulnerable to Deserialization of Untrusted Data
Media
CVE-2026-27172
Apache Camel-Consul component vulnerable to Deserialization of Untrusted Data
Crítica
CVE-2026-33453
Apache camel-coap allows header injection that can lead to remote code execution
Crítica
CVE-2026-40453
Apache Camel has an incomplete fix for CVE-2025-27636
Crítica
CVE-2026-41635
Apache MINA vulnerable to Deserialization of Untrusted Data
Crítica
CVE-2026-40860
Apache camel-jms, camel-sjms, camel-sjms2 and camel-amqp: Unsafe Deserialization of JMS ObjectMessage
Alta
CVE-2026-40473
Camel-MINA Vulnerable to Deserialization of Untrusted Data
Alta
CVE-2026-40048
Camel-PQC Vulnerable to Deserialization of Untrusted Data
Alta
CVE-2026-6741
LatePoint <= 5.4.1 - Authenticated (Agent+) Privilege Escalation to Administrator via 'connect-customer-to-wp-user' Ability
Media
CVE-2026-7045
Dynamic-Datasource has an Injection vulnerability
Media
CVE-2026-42384
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.11.2 - Unauthenticated Sensitive Information Exposure
Alta
CVE-2026-42381
FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.1 - Unauthenticated SQL Injection
Media
CVE-2026-42377
SureForms Pro <= 2.8.0 - Missing Authorization
Media
CVE-2026-42412
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.