Media
CVE-2026-1786
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Crítica
CVE-2026-21531
Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
Crítica
CVE-2026-1774
CASL Ability is Vulnerable to Prototype Pollution
Crítica
CVE-2026-1357
Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload
Media
CVE-2026-1893
Orbisius Random Name Generator <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btn_label' Shortcode Attribute
Media
CVE-2026-56294
cap-go/capacitor-native-biometric Authentication Bypass
Media
CVE-2026-1231
Beaver Builder Page Builder – Drag and Drop Website Builder <= 2.10.0.5 - Authenticated (Custom+) Missing Authorization to Stored Cross-Site Scripting via Global Settings
Media
CVE-2025-13431
SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter
Baja
CVE-2026-23901
Apache Shiro Affected by an Observable Timing Discrepancy Vulnerability
Media
CVE-2025-11537
Keycloak logs sensitive headers
Crítica
CVE-2026-23906
Apache Druid Vulnerable to Authentication Bypass
Media
CVE-2025-15524
Gallery by FooGallery <= 3.1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Metadata Exposure
Alta
CVE-2025-14541
Lucky Wheel Giveaway <= 1.0.22 - Authenticated (Administrator+) Remote Code Execution via 'conditional_tags' Parameter
Media
CVE-2026-25957
Cube Core is vulnerable to Denial of Service (DoS) via crafted request
Alta
CVE-2026-25958
Cube Core is vulnerable to privilege escalation via a specially crafted request
Alta
CVE-2026-25951
FUXA Affected by a Path Traversal Sanitization Bypass
Crítica
CVE-2026-25939
FUXA Unauthenticated Remote Arbitrary Scheduler Write
Crítica
CVE-2026-25938
FUXA Unauthenticated Remote Code Execution in Node-RED Integration
Media
ghsa-8grv-jq2g-cfhw
amphp/http-server affected by HTTP/2 DDoS vulnerability
Media
CVE-2026-25918
unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)
Alta
CVE-2026-25892
Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint
Crítica
CVE-2026-25881
@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)
Media
CVE-2026-25878
FroshAdminer Adminer UI is accessible without admin session
Media
CVE-2025-69389
Visitor Maps Extended Referer Field <= 1.2.6 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.