Bolsa Ética
Radar de amenazas · ETECHAL

Lo que se está explotando ahora mismo

Vulnerabilidades con explotación activa confirmada (catálogo CISA KEV) · actualizado 10 Ago 2026
Vulnerabilidades activas
1,662
Usadas en ransomware
339
Añadidas (este mes)
6

Nuevas amenazas catalogadas por mes

CVEFabricante / productoVulnerabilidadDetectada
CVE-2026-8037 Progress
LoadMaster
Progress LoadMaster Command Injection Vulnerability 2026-08-07
CVE-2026-63077 JetBrains
TeamCity
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability 2026-08-05
CVE-2026-18556 N-able
N-central
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability 2026-08-04
CVE-2026-34486 Apache
Tomcat
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability 2026-08-04
CVE-2026-9198 IBM
Langflow
IBM Langflow Code Injection Vulnerability 2026-08-04
CVE-2026-18577 N-able
N-central
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability 2026-08-03
CVE-2026-20316 Cisco
Secure Firewall Management Center (FMC)
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability 2026-07-29
CVE-2025-68686 Fortinet
FortiOS
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability 2026-07-27
CVE-2026-16812 Arista
VeloCloud Orchestrator
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability 2026-07-27
CVE-2026-16232 Check Point
SmartConsole
Check Point SmartConsole Improper Authentication Vulnerability 2026-07-22
CVE-2026-50522 Microsoft
SharePoint
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 2026-07-22
CVE-2026-60137 WordPress
Core
WordPress Core SQL Injection Vulnerability 2026-07-21
CVE-2026-63030 WordPress
Core
WordPress Core Interpretation Conflict Vulnerability 2026-07-21
CVE-2026-0770 Langflow
Langflow
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability 2026-07-21
CVE-2021-27137 DD-WRT
DD-WRT
DD-WRT Stack-Based Buffer Overflow Vulnerability 2026-07-21
CVE-2026-58644 Microsoft
SharePoint
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 2026-07-16
CVE-2026-25089 Fortinet
FortiSandbox
Fortinet FortiSandbox OS Command Injection Vulnerability 2026-07-16
CVE-2026-39808 Fortinet
FortiSandbox
Fortinet FortiSandbox OS Command Injection Vulnerability 2026-07-16
CVE-2026-46817 Oracle
E-Business Suite
Oracle E-Business Suite Improper Privilege Management Vulnerability 2026-07-15
CVE-2023-4346 KNX Association
KNX Protocol Connection Authorization Option 1
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability 2026-07-15
CVE-2026-56155 Microsoft
Active Directory Federation Services
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability 2026-07-14
CVE-2026-56164 Microsoft
SharePoint Server
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability 2026-07-14
CVE-2026-15409
Ransomware
SonicWall
SMA1000 Appliances
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability 2026-07-14
CVE-2026-15410
Ransomware
SonicWall
SMA1000 Appliances
SonicWall SMA1000 Appliances Code Injection Vulnerability 2026-07-14
CVE-2008-4128 Cisco
IOS
Cisco IOS Cross-Site Request Forgery Vulnerability 2026-07-13
CVE-2026-56291 Balbooa
Forms
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-10
CVE-2026-48939 iCagenda
iCagenda
iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-10
CVE-2026-48908 JoomShaper
SP Page Builder
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-07
CVE-2026-55255 Langflow
Langflow
Langflow Authorization Bypass Through User-Controlled Key Vulnerability 2026-07-07
CVE-2026-56290 Joomlack
Page Builder
Joomlack Page Builder Improper Access Control Vulnerability 2026-07-07
CVE-2026-48282 Adobe
ColdFusion
Adobe ColdFusion Path Traversal Vulnerability 2026-07-07
CVE-2026-45659
Ransomware
Microsoft
SharePoint Server
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability 2026-07-01
CVE-2026-48558 SimpleHelp
SimpleHelp
SimpleHelp Authentication Bypass Vulnerability 2026-06-29
CVE-2026-12569
Ransomware
PTC
Windchill and FlexPLM
PTC Windchill and FlexPLM Improper Input Validation Vulnerability 2026-06-25
CVE-2026-20230 Cisco
Unified Communications Manager
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability 2026-06-25
CVE-2025-67038 Lantronix
EDS5000
Lantronix EDS5000 Code Injection Vulnerability 2026-06-23
CVE-2026-34910 Ubiquiti
UniFi OS
Ubiquiti UniFi OS Improper Input Validation Vulnerability 2026-06-23
CVE-2026-34909 Ubiquiti
UniFi OS
Ubiquiti UniFi OS Path Traversal Vulnerability 2026-06-23
CVE-2026-34908 Ubiquiti
UniFi OS
Ubiquiti UniFi OS Improper Access Control Vulnerability 2026-06-23
CVE-2026-20253 Splunk
Enterprise
Splunk Enterprise Missing Authentication for Critical Function Vulnerability 2026-06-18

Fuente: CISA Known Exploited Vulnerabilities Catalog (dominio público). Cada CVE enlaza a su ficha en NVD.

PORTADA DEL DÍA