Alta
CVE-2026-27070
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Media
CVE-2026-24611
MetForm Pro <= 3.9.8 - Missing Authorization
Media
CVE-2026-27071
WPCafe – Restaurant Menu, Online Food Ordering and Reservation Booking Solution <= 3.0.7 - Missing Authorization
Alta
CVE-2026-24969
Instant VA <= 1.0.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Media
CVE-2026-24968
Xagio SEO – AI Powered SEO <= 7.1.0.30 - Unauthenticated Privilege Escalation
Media
CVE-2026-2687
Reading progressbar < 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2026-1540
Spam Protect for Contact Form 7 < 1.2.10 - Authenticated (Editor+) Remote Code Execution
Alta
CVE-2026-2466
DukaPress <= 3.2.4 - Unauthenticated Stored Cross-Site Scripting
Baja
CVE-2026-32109
Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`
Baja
CVE-2026-32108
Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access
Alta
CVE-2026-26127
.NET Denial of Service Vulnerability
Alta
CVE-2026-26130
.NET Denial of Service Vulnerability
Alta
CVE-2026-31958
Tornado is vulnerable to DoS due to too many multipart parts
Crítica
CVE-2026-31900
Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from
Media
CVE-2026-32094
Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash
Alta
CVE-2026-26131
.NET Elevation of Privilege Vulnerability
Alta
CVE-2026-31889
Shopware vulnerable to a potential take over of app credentials
Media
CVE-2026-31888
Shopware has user enumeration via distinct error codes on Store API login endpoint
Alta
CVE-2026-31887
Shopware: Unauthenticated data extraction possible through store-api.order endpoint
Media
CVE-2026-3429
Keycloak: Improper Access Control Leading to MFA Deletion and Account Takeover in Keycloak Account REST API
Sin evaluar
CVE-2026-4933
drupal/unpublished_node_permissions - SA-CONTRIB-2026-029
Sin evaluar
CVE-2026-3573
drupal/ai - SA-CONTRIB-2026-028
Baja
CVE-2026-56381
Craft CMS Vulnerable to Stored XSS via User Group Name in User Permissions Page
Alta
CVE-2026-31857
CraftCMS has an RCE vulnerability via relational conditionals in the control panel
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.