Crítica
CVE-2026-27497
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.631
Crítica
CVE-2026-27495
n8n has a Sandbox Escape in its JavaScript Task Runner
Alta
CVE-2026-27494
n8n has Arbitrary File Read via Python Code Node Sandbox Escape
Crítica
CVE-2026-27493
n8n has Unauthenticated Expression Evaluation via Form Node
Alta
CVE-2026-3105
Mautic is Vulnerable to SQL Injection through Contact Activity API Sorting
Media
CVE-2026-27799
ImageMagick has a heap Buffer Over-read in its DJVU image format handler
Media
CVE-2026-27798
ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images
Baja
CVE-2026-56362
ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization
Media
CVE-2026-56368
ImageMagick: Memory Leak in multiple coders that write raw pixel data
Baja
CVE-2026-56371
ImageMagick: Memory leak in coders/txt.c without freetype
Baja
CVE-2026-56379
ImageMagick: SVG-to-MVG Command Injection via coders/svg.c
Baja
CVE-2026-56378
ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS
Baja
CVE-2026-56373
mageMagick has a possible use-after-free write in its PDB decoder
Baja
CVE-2026-56376
ImageMagick has a possible heap Use After Free vulnerability in its meta coder
Baja
CVE-2026-56383
Craft CMS has Stored XSS in Table Field in its "Row Heading" Column Type
Crítica
CVE-2026-27641
Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection
Alta
CVE-2026-27610
Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessions
Alta
CVE-2026-27609
Parse Dashboard is Missing CSRF Protection for its Agent Endpoint
Crítica
CVE-2026-27608
Parse Dashboard is Missing Authorization for its Agent Endpoint
Crítica
CVE-2026-27702
Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)
Alta
CVE-2026-27732
AVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php
Sin evaluar
CVE-2026-3218
drupal/responsive_favicons - SA-CONTRIB-2026-019
Sin evaluar
CVE-2026-3217
drupal/miniorange_saml - SA-CONTRIB-2026-018
Sin evaluar
CVE-2026-3216
drupal/canvas - SA-CONTRIB-2026-017
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.