Saltar al contenido principal

Inteligencia pública · Sin registro

Qué se explota. Qué atender primero.

Prioriza con evidencia de explotación, probabilidad e impacto. No es un inventario completo ni confirma que tu equipo esté afectado: verifica producto y versión.

Explotándose (CISA KEV)

1,745

CVEs con explotación observada

CISA KEV · actualizado hace 51 min

Incorporaciones a KEV

+6

esta semana / +35 en 30 días

CISA KEV · actualizado hace 51 min

Ligadas a ransomware

361

CISA KEV · actualizado hace 51 min

Críticas nuevas (7 días)

431

10 con EPSS alto de 353 con EPSS publicado

NVD · actualizado hace 1 h

CVE.org · actualizado hace 1 h

FIRST EPSS · actualizado hace 51 min

Semana = últimos 7 días UTC, incluido hoy. KEV registra explotación observada, no ataques en curso ni su cantidad. EPSS estima probabilidad a 30 días; alto = percentil ≥ 80. Corte: 15/10/2026, 1:01:39 a.m. UTC.

Prioriza ahora

Hasta 10 CVEs de mayor prioridad para los filtros elegidos. Confirma exposición y aplica mitigaciones o parches del fabricante.

01CVE-2026-104935

Ivanti · Connect Secure

Ahora · Prioridad 87/100

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

  • en CISA KEV (explotación confirmada) hace 2 días
  • EPSS en percentil ≥ 95
  • plazo CISA en 1 día

CVSS 8.6EPSS 25.98%Percentil 98.0%

KEV: 2026-10-13 · Ransomware: desconocido · Plazo CISA: 2026-10-16

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "25.1.0.0",
            "versionEndExcluding": "25.1.1.2",
            "matchCriteriaId": "51F9201D-EF2F-4750-846E-912827761A9F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "25.1.2.0",
            "versionEndExcluding": "25.1.3.0",
            "matchCriteriaId": "822E7CEB-9AB2-4B0E-B87A-B9718503466A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2:*:*:*:*:*:*",
            "matchCriteriaId": "56FEC223-8FF7-4A05-9577-CFFE0AA6526C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.1:*:*:*:*:*:*",
            "matchCriteriaId": "5569D323-6ADF-4B16-822D-FBA6760356C3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.2:*:*:*:*:*:*",
            "matchCriteriaId": "FF4D400F-49DA-4C5F-8F63-5A15738360AE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.3:*:*:*:*:*:*",
            "matchCriteriaId": "9CA7EF35-D0BC-4714-A38A-91660BE1BA55"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.4:*:*:*:*:*:*",
            "matchCriteriaId": "F22EC396-A447-4175-8A30-C8DC10ACFFE9"
          }
        ]
      }
    ]
  }
]

02CVE-2026-76460

Cisco · Identity Services Engine

Ahora · Prioridad 86/100

Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

  • en CISA KEV (explotación confirmada) hace 29 días
  • EPSS en percentil ≥ 95
  • CVSS crítico ≥ 9

CVSS 10EPSS 14.03%Percentil 96.5%

KEV: 2026-09-16 · Ransomware: desconocido · Plazo CISA: 2026-09-19

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "7A789B44-7E6C-4FE9-BD40-702A871AB8AC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "93920663-445E-4456-A905-81CEC6CA1833"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "DF9CCBFA-0004-48F7-B142-6FDD4B3E1081"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "C91717BE-76EF-410C-970D-01C5FDC52A0B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "33DA5BB8-4CFE-44BD-9CEB-BC26577E8477"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "D3AEFA85-66B5-4145-A4AD-96D1FF86B46D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "7A6A0697-6A9E-48EF-82D8-36C75E0CDFDC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "E939B65A-7912-4C36-8799-03A1526D7BD3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "833B438F-0869-4C0D-9952-750C00702E8D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "E8B2588D-01F9-450B-B2E3-ADC4125E354E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "E41016C0-19E6-4BCC-A8DD-F6C9A2B0003E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "654E946A-07C5-4036-BC54-85EF42B808DD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "7932D5D5-83E1-4BEF-845A-D0783D4BB750"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "1B818846-4A6E-4256-B344-281E8C786C43"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "1EEC9040-9BD3-43D0-A33E-1EBD941EB65F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "A44858A2-922A-425A-8B38-0C47DB911A3C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "53484A32-757B-42F8-B655-554C34222060"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "0CCAC61F-C273-49B3-A631-31D3AE3EB148"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "B452B4F0-8510-475E-9AE8-B48FABB4D7D3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "5733512D-12B5-4098-AF90-9D68217FAC27"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "4ED98020-7BAF-4E5E-8B7B-22537200C283"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "4C6839DC-F3A2-4133-BF60-2E678E6DD4A4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "43F3A55D-D4FC-4D93-9513-94B64B21A2B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "F0F60A00-E952-400A-B553-BE96E7FF746F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "FF8B81A6-BF44-4E5F-B167-39F61DDCA026"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "56E0F0EC-3E66-4866-89F5-89B331F3F517"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "2E3E8937-2859-4A2A-91C0-05F674EF0466"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "D4B14684-EB9E-405B-85FA-B62E57CB292C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "22B752D1-9E8F-4FB7-8EEB-F9234492372B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "85A1CC7D-FE54-4AC0-B98F-972C4B1F3189"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "D23905E0-E525-49B1-8E5F-4EB42D186768"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "74509498-38EF-4345-9583-CEF5C26CA1D8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "CD05FF93-7B8C-4283-9DB7-E03FE98FAADF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "0F9B6A8E-E773-44A3-9266-878F0C58EB41"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "D3727619-E0CA-4CA9-BE35-0C732BCF1741"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "2CFB7565-3930-409C-B5DB-CE77E6ED7C42"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "A388D916-D6A1-4D3A-A48A-A150F387B755"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "2610FD35-BC4B-41B7-9C92-E6E5264FEE54"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "3FEE4377-B238-4442-9892-28CECFB2319E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "6598563B-7E32-43FB-96A7-88C53E4CE226"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "719C8E82-269D-4F21-B2B4-4CD3033A17F9"
          }
        ]
      }
    ]
  },
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "006E0D77-534C-447F-8E97-EC0AB906D978"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "AC07A742-D194-425C-945C-3977E96B61B8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "00D4B446-EDCE-41DC-A03B-97D8A371B0D9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "BE3B2985-AC34-4628-8564-517C48B9F475"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "97787372-9A0D-4916-A7A2-19237B84419F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "2E2D9D7C-A36E-489D-A2E1-ACE9E9C399BD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "3ABA57DA-78C9-489B-88E5-6E5275E53388"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "2ABFB0CE-60CF-4969-A91E-186F457C8014"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "B8CF7EF0-FBAA-47C7-8386-F67264CA8D0E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "5F08ACD7-2867-428A-966C-6509283FCA10"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "B365970F-9239-45F8-80C6-DA426FCA2E32"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "5A66142F-712F-4EFA-9FC4-E499D3015DD2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "50D8B7DD-14A8-4C67-8B32-E1F9C7D9C01E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "CB65DFF8-33D8-4840-8A63-7C4797FF0B51"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "9CAAF565-E1CF-4002-B91C-290ECAB2F16A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "890FDA62-DED9-401B-9D44-26F3624118CD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "604079BA-78F5-4D20-AF27-E7A9A899DA0C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "25344C6F-8EB6-4709-A51B-DCA26AA885E3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "51DE5AD0-5DFA-460D-B22D-0F5E367A9A28"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "683F2E87-9759-4A98-B7C9-489E74837D59"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "22BF8687-84E4-4609-8100-FD2408DF3247"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "19F88640-BC3E-42D2-ADDC-59114974103C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "40A94055-EF01-4799-813D-7BFFDD13C685"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "3CA3315D-8A45-43F4-A0F0-094D325F285B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "B3736136-9FD8-4B12-B119-EA15201224D9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "FB15AE6D-F4EF-40AD-A88E-D22612AEF2A4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "25B8E5EB-393A-40E8-9A0D-465ECCC2A4B8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "654ED77E-22D3-4E76-9E6D-B1581F5982F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "A0648EE9-F042-479F-9AAB-C6B5DBC46511"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "83F3BA58-4F38-41C8-956F-38A2F44EECE4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "6C30FA1D-91E2-48C5-B181-A88FDF668278"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "768215B1-80B7-40FF-8772-BA4C0B3913F5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "40239DA8-43B6-466B-85B0-6D644D7027D1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "9118B7ED-E678-47C3-9D17-F522D9362B2F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "C2ED3257-CB9D-4FD5-A482-3648CF292128"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "CC0525FD-C4D7-4B48-BF35-1791391AB148"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "68C96F6B-51EE-4D03-9598-CBFD16DA22EF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "62F25185-D19E-4EC5-8A68-7AB669B76E90"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "C457D2EC-FB63-49B7-A90E-CE67ED763BAE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "6566330F-A048-44A1-9821-7A5844C82CEC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "1154F196-2CB3-4AC2-BE00-11A8942EA999"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "7E30ECF6-5B1D-4280-AA02-123153E68F28"
          }
        ]
      }
    ]
  }
]

03CVE-2026-93616

Check Point · Multiple Products

Ahora · Prioridad 86/100

Check Point Multiple Products Path Traversal Vulnerability

  • en CISA KEV (explotación confirmada) hace 23 días
  • EPSS en percentil ≥ 95
  • CVSS crítico ≥ 9

CVSS 9.8EPSS 19.65%Percentil 97.4%

KEV: 2026-09-22 · Ransomware: desconocido · Plazo CISA: 2026-09-25

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "r80",
            "versionEndExcluding": "r81.10",
            "matchCriteriaId": "46543FA9-C054-4F64-B6A9-37191C09C8BC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "A2428B4E-3754-44B5-9C21-AE9F7746A440"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_106:*:*:*:*:*:*",
            "matchCriteriaId": "BA42413E-A16A-4D83-BD08-C44D2272B352"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "B55EFDA0-B970-4EB0-A1B8-FE10E3FF1D39"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_109:*:*:*:*:*:*",
            "matchCriteriaId": "8A5711F6-13C5-4C50-ADE2-8E9465BEABCB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_110:*:*:*:*:*:*",
            "matchCriteriaId": "8F71DADF-125C-458F-81E2-A572527C10C6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "2C1FE1CC-4FA9-420A-8F7A-E180027F1A33"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_128:*:*:*:*:*:*",
            "matchCriteriaId": "C38E5B49-3074-48F3-A623-7C86C27204C6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_129:*:*:*:*:*:*",
            "matchCriteriaId": "CD9E8386-0220-4A94-87FD-D9E663983AFA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_130:*:*:*:*:*:*",
            "matchCriteriaId": "A5ACC58D-34A8-4D04-98C6-8DFF9465DC60"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_131:*:*:*:*:*:*",
            "matchCriteriaId": "78074569-7B81-440B-BEDA-5F1B6002CA57"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_132:*:*:*:*:*:*",
            "matchCriteriaId": "CD9E6258-DF53-4E47-9DE5-109F3E5F5A71"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_135:*:*:*:*:*:*",
            "matchCriteriaId": "BB44CD33-CDC4-4D51-A897-2EF8E108546B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_139:*:*:*:*:*:*",
            "matchCriteriaId": "8DBDF8B8-5A70-427B-91F1-7678D3CC281C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "964C5CDC-D605-4A4F-B1E8-92BE59EDA34A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "B6A031A8-D79B-461C-A613-C9D922709A8C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_150:*:*:*:*:*:*",
            "matchCriteriaId": "4DACDF4E-DDDF-4C32-9E36-8F41370BDBBA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_152:*:*:*:*:*:*",
            "matchCriteriaId": "C25851DF-54C5-40EE-BCFF-3E65EBBB1564"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_156:*:*:*:*:*:*",
            "matchCriteriaId": "B029BBE5-EAEC-4E10-A7FE-45ABB458D85B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "75529BA5-943C-46D6-9C33-18D1EEB8063A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_165:*:*:*:*:*:*",
            "matchCriteriaId": "F08CD952-5857-4C7D-8982-389A9DCC8309"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_169:*:*:*:*:*:*",
            "matchCriteriaId": "75BBDB88-78C3-47E1-848C-B8BAA7B284E0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_170:*:*:*:*:*:*",
            "matchCriteriaId": "AB9581B4-B2FA-4946-9674-391FE35E5B67"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_171:*:*:*:*:*:*",
            "matchCriteriaId": "5E34C44D-5F7A-4260-9B48-D333932F9A61"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_172:*:*:*:*:*:*",
            "matchCriteriaId": "5C9D465A-61AF-4921-B814-9917F7ADE4CA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_173:*:*:*:*:*:*",
            "matchCriteriaId": "4B3D629E-119E-46DE-ACF0-F939E0E44B32"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_174:*:*:*:*:*:*",
            "matchCriteriaId": "F55AD3DF-EE8A-421D-B430-77ABC7670AB4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_177:*:*:*:*:*:*",
            "matchCriteriaId": "AB895616-A0B0-4CF8-A915-AEFBFADECF75"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_181:*:*:*:*:*:*",
            "matchCriteriaId": "11BD9477-949D-436C-A724-7C0DD5755C1A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_183:*:*:*:*:*:*",
            "matchCriteriaId": "20A8D3F6-45C7-4985-8EF2-399274E6466A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_187:*:*:*:*:*:*",
            "matchCriteriaId": "043058AE-6D16-494F-8489-B9F87F0CBDD9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_190:*:*:*:*:*:*",
            "matchCriteriaId": "CFC597DF-66DC-46E7-A31A-82D253A70E7F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_22:*:*:*:*:*:*",
            "matchCriteriaId": "8793BA9A-096E-4E58-A73C-E60C6E010019"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_30:*:*:*:*:*:*",
            "matchCriteriaId": "993ECDA4-9028-46DB-853E-AF07153A6F94"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "7A4F9499-F5B5-4CA3-BED3-F2909AEB7F7C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "4809F58C-906A-4DFB-8520-EC92A4A6FE43"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "3EDB5D74-5C06-472B-A442-D9940B7885D0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_55:*:*:*:*:*:*",
            "matchCriteriaId": "CEB4451F-3296-49E8-B171-BD06167C16D0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_61:*:*:*:*:*:*",
            "matchCriteriaId": "FA3DEADA-8C44-4F7D-BE4D-004C3B97950C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_66:*:*:*:*:*:*",
            "matchCriteriaId": "FFFA1CC6-612A-4701-BFE1-B7AC97B2921F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_75:*:*:*:*:*:*",
            "matchCriteriaId": "1778DF16-6C1E-4228-ACF8-EC94EF0BC884"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_78:*:*:*:*:*:*",
            "matchCriteriaId": "EABB856E-E059-493F-B359-ED9FE39E2637"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "AE129711-6F49-4A3E-A0A1-F64A7655E18F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_81:*:*:*:*:*:*",
            "matchCriteriaId": "EAC196AC-EF63-43F9-BE27-11807E4200DC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_82:*:*:*:*:*:*",
            "matchCriteriaId": "527ED156-030A-4785-811A-9A1D226B9F76"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_85:*:*:*:*:*:*",
            "matchCriteriaId": "C99694F6-A7D0-47A4-BC54-938BC81F7D54"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_87:*:*:*:*:*:*",
            "matchCriteriaId": "4410B9E8-BB15-4A3C-98E2-CF6E259FF74E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_9:*:*:*:*:*:*",
            "matchCriteriaId": "68864C91-5D68-46A3-A671-61EBA3D86762"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_93:*:*:*:*:*:*",
            "matchCriteriaId": "336F50C0-B258-406F-9C56-A20C1ADF9F36"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_94:*:*:*:*:*:*",
            "matchCriteriaId": "5CFFD6BE-1679-4462-A20F-8AF76E3566CD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_95:*:*:*:*:*:*",
            "matchCriteriaId": "FBBBCC15-698D-4B75-8CC6-212870CA29AC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "60E5A48C-4ABB-46DB-BA75-132AFB408BC8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "BD16B955-141C-4F13-A9BC-6CCCD96248B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_101:*:*:*:*:*:*",
            "matchCriteriaId": "F70DA99D-131C-46CC-B582-CB9419DB1B64"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "B06457A0-ED12-4412-BB1D-1D24E0C751EA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_105:*:*:*:*:*:*",
            "matchCriteriaId": "FD7D44D8-C2D1-46C4-B9E4-29664BCFEAB4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_111:*:*:*:*:*:*",
            "matchCriteriaId": "3A7EF92D-B4CC-4868-9026-8F5DA0D14DFC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "4347D905-4E57-4D64-9B57-C406A70DC0C1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_115:*:*:*:*:*:*",
            "matchCriteriaId": "12E1E158-790D-40D4-81FF-622307C4524E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "01DA6EEA-746F-4EB2-81C5-F7C064519D44"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_119:*:*:*:*:*:*",
            "matchCriteriaId": "AD575960-0B66-48F9-BC9D-6F7DAEF0BCBC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_120:*:*:*:*:*:*",
            "matchCriteriaId": "776DF4D6-9CC1-4BC2-93D0-9DE2405716EA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "C0AABCDA-255E-4096-8DEF-483E0373E7F7"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "236CB75E-705A-46B3-A531-29E343AA024A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_127:*:*:*:*:*:*",
            "matchCriteriaId": "D1A5645A-D22D-4B5B-86FA-29642111FEDF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "B90AA06D-C905-4811-A93A-44F787563FB0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "8A1BC954-296C-4A94-847D-479825CDA84C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_146:*:*:*:*:*:*",
            "matchCriteriaId": "BADA45FE-319D-421F-B4B6-D221D78B69CC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "131ADAE9-9514-4C12-BE4D-312EB16F2E24"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_161:*:*:*:*:*:*",
            "matchCriteriaId": "9D912106-DC05-42B9-914B-A559ED20CAB6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_166:*:*:*:*:*:*",
            "matchCriteriaId": "31D18E59-D406-4263-83B1-F9267667AE1E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "CBA6E4FC-BDCC-425F-9D69-E9183548893A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_26:*:*:*:*:*:*",
            "matchCriteriaId": "6DF70422-7897-49CC-8874-A96D4CA64E11"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "F3240200-0517-43FD-BED2-D8AF844BF6E6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "BE6FBF0A-195F-4E52-9FBF-CD9A71EF3A36"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "57B969D9-DCC0-4B06-818F-CE2521C4C0C0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "CA897E69-E1CE-45A1-A0DB-A7BF444484F3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_53:*:*:*:*:*:*",
            "matchCriteriaId": "A13B8B4D-D746-432A-8833-BDF3A5A13CB4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_54:*:*:*:*:*:*",
            "matchCriteriaId": "CF0A7585-591D-4FA1-941E-55FB0207C207"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_65:*:*:*:*:*:*",
            "matchCriteriaId": "2A5B10FC-D9B5-4BB2-AD82-0B9AFB2AD0DE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_70:*:*:*:*:*:*",
            "matchCriteriaId": "ECE1DDA0-9A0A-44D5-919E-24810E7131B0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_76:*:*:*:*:*:*",
            "matchCriteriaId": "491F74B1-998F-459A-A27D-EB01597C9B01"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "A31115EC-8018-4EF3-B5D0-0F1EA2392680"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_8:*:*:*:*:*:*",
            "matchCriteriaId": "E415D02C-B30A-4210-8F14-47ABF46D4E64"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_84:*:*:*:*:*:*",
            "matchCriteriaId": "27AED864-AC5B-4FCF-9FD7-6E0D49569BB2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_89:*:*:*:*:*:*",
            "matchCriteriaId": "ABF3E632-8D50-4373-9576-0E710511D21B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_90:*:*:*:*:*:*",
            "matchCriteriaId": "C6229824-D7A7-439E-9FDD-95F753061410"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_92:*:*:*:*:*:*",
            "matchCriteriaId": "B218B25D-7722-435C-AA22-B5411E786277"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_96:*:*:*:*:*:*",
            "matchCriteriaId": "7A49ABD5-57B9-4E06-AFFE-8A1269BB16C8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_98:*:*:*:*:*:*",
            "matchCriteriaId": "3BFA1E0F-A214-4150-A0BD-44B5424A667E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_99:*:*:*:*:*:*",
            "matchCriteriaId": "265683A2-DA16-4CDC-AE9D-CE14BAB28A79"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:-:*:*:*:*:*:*",
            "matchCriteriaId": "2D16C37E-3064-4E15-8590-3B3020E4FF7E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "C01C66D8-5B48-4255-8246-9301EEA863DA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "22A0D74F-5216-40D9-B07C-8789A8E2D328"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "F2C763B7-B4BD-4915-A33B-9675DC2A1EA5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "1844D63C-499D-4185-B1B5-89FBE609F8FA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_12:*:*:*:*:*:*",
            "matchCriteriaId": "EC227225-ECF6-4025-B288-992ADE9B6B4B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "C7BF37CC-BE7A-4DDD-B5DA-8216B6FE9D44"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "7FD699CE-41C5-4A8D-BE52-35CBF1F16C96"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "673F8F1B-E64E-44D1-A793-F2B4ED56DDBD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_18:*:*:*:*:*:*",
            "matchCriteriaId": "927823EC-B157-4B5C-A4A3-F9D249C88E2C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "0DBDDAA3-3CA1-4490-8D43-C8C5C5188A6E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_25:*:*:*:*:*:*",
            "matchCriteriaId": "73AEA72B-8E44-4839-8651-5076EBC609B1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_33:*:*:*:*:*:*",
            "matchCriteriaId": "B11AA664-F3C8-44A6-AD11-14AF6AFAD2E2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_34:*:*:*:*:*:*",
            "matchCriteriaId": "0D511D85-A534-49A5-A9AE-88BC624311B6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "B0A2B178-FC15-4D76-9075-D605F87F350D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_39:*:*:*:*:*:*",
            "matchCriteriaId": "1360EBA1-B59B-472E-9019-9EB560A05699"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "F1301887-F38A-4FE6-9614-1FCF8FDE681C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "74DA6820-BE56-4115-A058-45CFF400DAA6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "54ECA176-C752-42C6-A9B2-CF408D8C580E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_60:*:*:*:*:*:*",
            "matchCriteriaId": "D2E35CA7-FED1-44E9-B144-1B51A2D7FB8B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_73:*:*:*:*:*:*",
            "matchCriteriaId": "DBA345D3-0FE7-4BE9-BEBB-96CD4055E546"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_91:*:*:*:*:*:*",
            "matchCriteriaId": "E2D4A292-EE3B-4A3A-9B16-E03626F82832"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "9381DBDF-5CE2-454C-BE04-859C9A197C90"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "F7442AF7-C511-4A15-AA85-FCB741F6A733"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "B9E02250-00AF-4684-A9A0-E9E4032DEA66"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "AC444B54-CFE5-4B7C-A885-9DE87394B132"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_40:*:*:*:*:*:*",
            "matchCriteriaId": "9B722ECE-8995-4D34-AC3B-3CEAF1FDAA08"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "E8D09FD6-5DC3-4C3A-8598-E91F86C5F657"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_6:*:*:*:*:*:*",
            "matchCriteriaId": "27057734-9870-4BA0-9A29-DB03FDFE485F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "E29151E7-2021-4553-8F70-AAE4AAB10188"
          }
        ]
      }
    ]
  },
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "r80",
            "versionEndExcluding": "r81.10",
            "matchCriteriaId": "B7EA18CB-4869-48C3-A9BC-0B0A6580FF1A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "E3EFE5C0-04CD-4B17-AD14-5035C2969047"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_106:*:*:*:*:*:*",
            "matchCriteriaId": "59FBDFE0-B5D7-44B5-B8A4-7ED87D8D1C13"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "BB2A0A91-CB75-455E-AA39-A4A79C8B574C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_109:*:*:*:*:*:*",
            "matchCriteriaId": "A8EFFC09-DF62-41C5-A719-30CC9D323F96"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_110:*:*:*:*:*:*",
            "matchCriteriaId": "C330AA5D-155B-4B29-968F-3A2B95EE7FAC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "653CF951-198E-4378-82E6-145052CF388A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_128:*:*:*:*:*:*",
            "matchCriteriaId": "8819E6BD-A6E0-4BC5-8BA8-A227266120E6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_129:*:*:*:*:*:*",
            "matchCriteriaId": "B5A0A754-1D52-4C50-80F3-CEB12F67E5AB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_130:*:*:*:*:*:*",
            "matchCriteriaId": "7444A711-160A-4B65-955A-509C0A169A6D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_131:*:*:*:*:*:*",
            "matchCriteriaId": "D11061E3-C47D-4B72-9226-960965DF73F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_132:*:*:*:*:*:*",
            "matchCriteriaId": "4DD733B2-3D1B-4EDF-B6E3-1F04089CDFF5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_135:*:*:*:*:*:*",
            "matchCriteriaId": "0FDDB709-B86E-4EF0-BFFF-E866F5AC13BE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_139:*:*:*:*:*:*",
            "matchCriteriaId": "3C2F9CF0-6684-4353-A4A1-7D117CF8032D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "EE2DD8DD-3060-4029-AE0E-861DE3EF6C3F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "F19DC5F4-4F3D-47E9-9EE1-71EC0FDF2D17"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_150:*:*:*:*:*:*",
            "matchCriteriaId": "76101CB6-BD1F-4E0D-BB88-9CC7EA3E84C8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_152:*:*:*:*:*:*",
            "matchCriteriaId": "A7628981-6822-44C0-82AC-43BE06DEA3E3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_156:*:*:*:*:*:*",
            "matchCriteriaId": "BBB95805-9CCC-4220-B4C1-BF5535968998"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "7E441395-16C7-4AFD-BCE5-B7CCED66AEC3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_165:*:*:*:*:*:*",
            "matchCriteriaId": "93B0F1EF-1EA1-45A3-ABE1-0BA9E29E8820"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_169:*:*:*:*:*:*",
            "matchCriteriaId": "41F7E1A6-F1FA-409A-A8BF-40DDB5EB00FF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_170:*:*:*:*:*:*",
            "matchCriteriaId": "D3CC56EB-2456-485F-B7DF-B3F25FB99554"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_171:*:*:*:*:*:*",
            "matchCriteriaId": "5EEC17E9-CEF9-4FB2-B1D9-43728013D096"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_172:*:*:*:*:*:*",
            "matchCriteriaId": "727BE9AD-AF6C-4159-9932-496480C8B436"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_173:*:*:*:*:*:*",
            "matchCriteriaId": "A0B43191-7C2E-46EE-825C-05000A7FBFEC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_174:*:*:*:*:*:*",
            "matchCriteriaId": "40EBD18C-3A36-43DA-B045-631CC7517F25"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_177:*:*:*:*:*:*",
            "matchCriteriaId": "8891CA25-BB20-4A71-90CA-B94422B71EA5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_181:*:*:*:*:*:*",
            "matchCriteriaId": "40776587-1731-4579-A8C6-619DB6DDD3F2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_183:*:*:*:*:*:*",
            "matchCriteriaId": "268462D2-87BD-4144-9255-163DB1711917"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_187:*:*:*:*:*:*",
            "matchCriteriaId": "858E5667-5661-4DC9-9017-498F0C107699"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_190:*:*:*:*:*:*",
            "matchCriteriaId": "DD908FC8-7991-41F9-87C1-45DA624B24B5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_22:*:*:*:*:*:*",
            "matchCriteriaId": "39876606-2D2B-49FC-9A7F-9A564418EB8C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_30:*:*:*:*:*:*",
            "matchCriteriaId": "A3F582E0-A364-4B88-9C06-3796707745FD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "8490D7B3-4553-457F-A89C-136911626C70"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "59CA7C8E-63D3-48D4-AA6F-DEB270976A5E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "D6E1781C-58C6-4336-9354-40166B88B6C5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_55:*:*:*:*:*:*",
            "matchCriteriaId": "7A05B5FE-A04D-4A75-A1A6-89BB2A00A0E1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_61:*:*:*:*:*:*",
            "matchCriteriaId": "7101AE06-0C27-4A04-A232-10E4327A9C18"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_66:*:*:*:*:*:*",
            "matchCriteriaId": "47EE9CF9-65D8-4DB3-82EA-ECC20447B037"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_75:*:*:*:*:*:*",
            "matchCriteriaId": "0E784373-CFE7-4598-809F-5C4DBCEF70AA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_78:*:*:*:*:*:*",
            "matchCriteriaId": "AEF420B8-0D77-47B1-A19E-9311BD86CA6E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "B5B93BB5-16BB-452A-97D5-10C7772F660F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_81:*:*:*:*:*:*",
            "matchCriteriaId": "A1F6B14B-40C5-4FEF-BC85-84E4B4361079"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_82:*:*:*:*:*:*",
            "matchCriteriaId": "3ECC6338-F541-449F-AD62-9D852F4E7454"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_85:*:*:*:*:*:*",
            "matchCriteriaId": "B14FD6AB-A559-49B9-9C97-978647042EAC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_87:*:*:*:*:*:*",
            "matchCriteriaId": "D6F74C50-FB32-446F-94FF-F5342D56741A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_9:*:*:*:*:*:*",
            "matchCriteriaId": "B531E951-4293-45C1-A779-9B7052704AC8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_93:*:*:*:*:*:*",
            "matchCriteriaId": "FCA346D0-0D8E-4FB4-AE11-E0A062A339BD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_94:*:*:*:*:*:*",
            "matchCriteriaId": "9F6F7CC6-CC82-40BE-88FE-0A2B43ACA314"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_95:*:*:*:*:*:*",
            "matchCriteriaId": "7C669D64-A6B6-495A-BBC2-62B6947978E0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "A8F7304B-C04F-4C5B-9E98-D736C55A0AE2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "A897D6EA-56D9-4246-9985-9BCE0B5B575E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_101:*:*:*:*:*:*",
            "matchCriteriaId": "A93B1873-08AD-45D4-9F27-D76DEBD445E4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "C29DD086-7438-45BD-B1DC-B20D2753A7E2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_105:*:*:*:*:*:*",
            "matchCriteriaId": "A7792771-5225-4B15-8B12-94AC5DB158D8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_111:*:*:*:*:*:*",
            "matchCriteriaId": "54CF3193-F101-4BD9-952F-47886308799B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "F012878A-86CE-4881-94C1-CA39420E2888"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_115:*:*:*:*:*:*",
            "matchCriteriaId": "E8A50B35-2459-43C2-840B-D3BC78837C6A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "C62D9794-379F-4722-B467-0CFE65A12B80"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_119:*:*:*:*:*:*",
            "matchCriteriaId": "D92A32EE-259C-423B-B422-A765EF4426F9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_120:*:*:*:*:*:*",
            "matchCriteriaId": "668D309B-DA82-4EC4-9F09-A5772BC17447"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "1230C289-7789-471F-9EA3-2FE2DCDA6981"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "96187221-D11F-4CFA-83AD-0548A528C320"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_127:*:*:*:*:*:*",
            "matchCriteriaId": "AF79E967-AEE7-494E-B8E4-94ABFE8BEFB7"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "E450F71D-626F-4515-91A2-5F4FCD8FE21D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "6E73C0C0-227D-42EA-9E5F-BD9120E94213"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_146:*:*:*:*:*:*",
            "matchCriteriaId": "926F2DA0-8168-4EED-BB8E-E9A7BC185970"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "5B16C81F-361A-475A-A7EF-417738EC555A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_161:*:*:*:*:*:*",
            "matchCriteriaId": "1A14DC8E-32C7-4BA9-A88E-6D03F8473DDD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_166:*:*:*:*:*:*",
            "matchCriteriaId": "34C9AF5B-F155-4D9C-B4B4-730696A85873"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "273F628E-2889-412C-BC02-82FEEF4CE6AF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_26:*:*:*:*:*:*",
            "matchCriteriaId": "40CC00A2-E57F-49B8-BD9A-A3107258EFF9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "38C33CF8-3FA4-4775-91CF-83B9A4B51B5D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "186C5B76-630C-483E-9C44-27BA00A1365B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "965C32C2-BAD2-415A-B8F3-A5B2A96C077F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "1D7B7908-F110-4937-A16F-E942F7EE94E8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_53:*:*:*:*:*:*",
            "matchCriteriaId": "A7CE4E97-2553-4B54-9B49-2AEFFF1E97DF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_54:*:*:*:*:*:*",
            "matchCriteriaId": "C3BB26FE-A7A4-4C0C-82E0-3B690C08AF4D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_65:*:*:*:*:*:*",
            "matchCriteriaId": "CC0BAF78-22E6-4F90-885D-654A317832C3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_70:*:*:*:*:*:*",
            "matchCriteriaId": "2CEFB387-F28B-4A26-B0BD-A99D88765CF2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_76:*:*:*:*:*:*",
            "matchCriteriaId": "05C5D50F-DD77-4B91-9B98-EA79206E3AEC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "E7A2F23D-A588-4895-91CB-F4726D244E71"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_8:*:*:*:*:*:*",
            "matchCriteriaId": "496C913F-16A4-4710-80EB-0444ED57F981"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_84:*:*:*:*:*:*",
            "matchCriteriaId": "F7B7D466-132A-4584-B6D8-68C05F02E3AE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_89:*:*:*:*:*:*",
            "matchCriteriaId": "B8DDE050-D1E9-4E42-A511-FE85C5482EAD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_90:*:*:*:*:*:*",
            "matchCriteriaId": "2508B0C0-F3F7-4993-A90B-31DBD299C7EB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_92:*:*:*:*:*:*",
            "matchCriteriaId": "EB51FD59-0119-4335-851F-65F108E34885"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_96:*:*:*:*:*:*",
            "matchCriteriaId": "F26A6EE5-5083-42BE-822A-66BB279B68F6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_98:*:*:*:*:*:*",
            "matchCriteriaId": "D3BC31FE-EE44-4919-96F1-A3CD9EB2E6F9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_99:*:*:*:*:*:*",
            "matchCriteriaId": "54AF1EBC-02AE-4303-93E9-ACE2C15831B3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:-:*:*:*:*:*:*",
            "matchCriteriaId": "9A4DD35F-132E-4CB4-846C-8C0A0DAE11A3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "28B96884-0ED3-4B3F-9FF2-D9826C6A11C8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "498B5193-9227-408B-BB96-93D47FE6C136"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "5F5BF964-A06C-46B4-BBAF-B992F2BFE5BA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "D6BC96F7-EA95-4126-AF11-CA51E710B8B5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_12:*:*:*:*:*:*",
            "matchCriteriaId": "25CBBD3E-F6BC-44A8-ADF8-A2A683C4FD90"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "09AFB3C5-3E13-4079-B732-9994FB108B80"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "4BB9DABC-4207-4BE4-80B9-5431BE8924CC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "A593B6C5-F968-4C08-9CEC-0D04CBCFCBAE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_18:*:*:*:*:*:*",
            "matchCriteriaId": "B08AEDE4-10E7-49B1-A7E3-343C16651E0C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "F52CCFD6-8E42-4704-BCDB-8D4743AD8878"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_25:*:*:*:*:*:*",
            "matchCriteriaId": "D1A5BD3C-6C81-4948-BD6E-351AE54E051B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_33:*:*:*:*:*:*",
            "matchCriteriaId": "92E9C407-AAF6-4FE8-ABF8-28E78090C2F5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_34:*:*:*:*:*:*",
            "matchCriteriaId": "17892B1E-CFC8-4A21-A654-0C67AE1CEA02"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "782C1482-BF59-4663-A17F-A10247715223"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_39:*:*:*:*:*:*",
            "matchCriteriaId": "ECB15DB7-ACF9-4D7E-8BAC-C65634E7C813"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "D5E45EF8-9B5E-4AAB-8952-9358AC1625D4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "BAA7ADEB-B8BF-41C3-B8F9-44B3F617A8B6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "539F141A-9129-418A-8C86-8DF565A0106B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_60:*:*:*:*:*:*",
            "matchCriteriaId": "2F1C55C8-9EFD-4B74-A1B9-83E1B8B4B306"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_73:*:*:*:*:*:*",
            "matchCriteriaId": "BC2BB169-1FE9-4DD9-95DD-C2875068B976"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_91:*:*:*:*:*:*",
            "matchCriteriaId": "7924252E-97BB-4ADE-81CA-4EB974B6FD51"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "4005C231-9EA2-40A5-A2F0-5A94EA498E96"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "395F93BF-DAC3-4213-AA34-D708570B5B9F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "CF84D1C9-E656-4CBF-85DB-3AE434DF87F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "43F8A4D6-ECED-4155-A41C-48B1506D32B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_40:*:*:*:*:*:*",
            "matchCriteriaId": "5ABBDE5D-BD23-45CE-BDA8-3168C53803B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "5D89F1B2-43E0-486D-AEC6-0D1B35C4B8A4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_6:*:*:*:*:*:*",
            "matchCriteriaId": "05B0445D-E33E-4F3F-B21C-B6988C8F0BBB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "10FE3305-F601-4757-9080-E7F41B2974AA"
          }
        ]
      }
    ]
  }
]

04CVE-2026-104286

Fortinet · FortiMail

Ahora · Prioridad 85/100

Fortinet FortiMail Path Traversal Vulnerability

  • en CISA KEV (explotación confirmada) hace 14 días
  • EPSS en percentil ≥ 80
  • CVSS crítico ≥ 9

CVSS 9.8EPSS 2.20%Percentil 82.2%

KEV: 2026-10-01 · Ransomware: desconocido · Plazo CISA: 2026-10-04

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.2.0",
            "versionEndIncluding": "7.4.8",
            "matchCriteriaId": "77C9CE10-1038-4100-81E0-234822E6373B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.6.0",
            "versionEndIncluding": "7.6.6",
            "matchCriteriaId": "1EA73418-A7A1-4247-BA3E-969550962E0E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "8.0.0",
            "versionEndIncluding": "8.0.1",
            "matchCriteriaId": "DDAF1B20-36CA-4DD4-9483-6B605001B9DA"
          }
        ]
      }
    ]
  }
]

05CVE-2026-59310

Broadcom · VMware vCenter

Ahora · Prioridad 85/100

Broadcom VMware vCenter Path Traversal Vulnerability

  • en CISA KEV (explotación confirmada) hace 58 días
  • ligada a ransomware
  • EPSS en percentil ≥ 80

CVSS sin puntuarEPSS 2.56%Percentil 84.8%

KEV: 2026-08-18 · Ransomware: reportado · Plazo CISA: 2026-08-21

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

06CVE-2026-63077

JetBrains · TeamCity

Ahora · Prioridad 85/100

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

  • en CISA KEV (explotación confirmada) hace 71 días
  • ligada a ransomware
  • EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 89.57%Percentil 99.8%

KEV: 2026-08-05 · Ransomware: reportado · Plazo CISA: 2026-08-08

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

07CVE-2026-87902

WordPress · Core

Ahora · Prioridad 85/100

WordPress Core Remote File Inclusion Vulnerability

  • en CISA KEV (explotación confirmada) hace 20 días
  • EPSS en percentil ≥ 95

CVSS 8.1EPSS 39.98%Percentil 98.6%

KEV: 2026-09-25 · Ransomware: desconocido · Plazo CISA: 2026-09-28

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "4.7.37",
            "matchCriteriaId": "F1CFA516-E292-436E-9B45-BD6ACB344205"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "4.8",
            "versionEndExcluding": "4.8.32",
            "matchCriteriaId": "8EEBFAB5-8903-4D4E-9847-A50A3F840878"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "4.9",
            "versionEndExcluding": "4.9.33",
            "matchCriteriaId": "5A7719CA-2099-45E9-8E48-64EF672C76C0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.0",
            "versionEndExcluding": "5.0.29",
            "matchCriteriaId": "BFA3645E-7056-449B-9DEB-D9D53EB21488"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.1",
            "versionEndExcluding": "5.1.26",
            "matchCriteriaId": "3582671F-7248-420A-8DF7-F32742D0D2AF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.2",
            "versionEndExcluding": "5.2.28",
            "matchCriteriaId": "FD9C147A-9FCB-46A7-8409-4AE652986FDC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.3",
            "versionEndExcluding": "5.3.25",
            "matchCriteriaId": "73C13CF0-B293-47C4-93AA-F46E0323A9C1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.4",
            "versionEndExcluding": "5.4.23",
            "matchCriteriaId": "7FB5AE52-9590-4B1D-BDFF-A522EFDD55DC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.5",
            "versionEndExcluding": "5.5.22",
            "matchCriteriaId": "72A42175-5759-47B1-8E87-ADAF0CDB73C7"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.6",
            "versionEndExcluding": "5.6.21",
            "matchCriteriaId": "5D7C48F3-BBB2-4943-A6F2-E652997034FE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.7",
            "versionEndExcluding": "5.7.19",
            "matchCriteriaId": "D23FACBB-B9EC-4490-B328-24833FEF6209"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.8",
            "versionEndExcluding": "5.8.17",
            "matchCriteriaId": "47F4A57C-CA16-4E9A-B0C2-EBB5FCCB41B9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.9",
            "versionEndExcluding": "5.9.18",
            "matchCriteriaId": "83CC56B0-F56E-4862-B74E-B106092C73F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.0",
            "versionEndExcluding": "6.0.16",
            "matchCriteriaId": "E3EE7487-2943-4229-8B04-8787FE730FCB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.1",
            "versionEndExcluding": "6.1.14",
            "matchCriteriaId": "E83A61A6-8FBC-4AF6-98E6-0152CA380AA0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.2",
            "versionEndExcluding": "6.2.13",
            "matchCriteriaId": "D97C90F9-83C3-4057-A7E2-61787BC24E05"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.3",
            "versionEndExcluding": "6.3.12",
            "matchCriteriaId": "D7DA40D7-228A-4CFF-8CC8-32321BB1D3C5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.4",
            "versionEndExcluding": "6.4.12",
            "matchCriteriaId": "DDE93788-7DAB-475C-B6AE-753780DE8160"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.5",
            "versionEndExcluding": "6.5.12",
            "matchCriteriaId": "18808A77-C445-4D07-A364-A676F2D7FD63"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.6",
            "versionEndExcluding": "6.6.9",
            "matchCriteriaId": "ADEAA29A-1862-476B-8F21-684D8799589E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.7",
            "versionEndExcluding": "6.7.9",
            "matchCriteriaId": "D3BD738C-4601-43C1-A5BC-E5AFB0189CD9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.8",
            "versionEndExcluding": "6.8.10",
            "matchCriteriaId": "4A6867FC-850F-437B-8532-63A5F747D64F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.9",
            "versionEndExcluding": "6.9.9",
            "matchCriteriaId": "5C21A09B-5001-4F4E-A49D-4F29032AF612"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.0",
            "versionEndExcluding": "7.0.6",
            "matchCriteriaId": "6FC26EAE-8D7D-4BF9-AACE-75C6AB13279F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.1",
            "versionEndExcluding": "7.1.2",
            "matchCriteriaId": "525A2372-93E8-447E-BBB7-F795C08B3E2B"
          }
        ]
      }
    ]
  }
]

08CVE-2015-3306

ProFTPD · ProFTPD

Ahora · Prioridad 84/100

ProFTPD Improper Access Control Vulnerability

  • en CISA KEV (explotación confirmada) hace 7 días
  • EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 99.50%Percentil 99.9%

KEV: 2026-10-08 · Ransomware: desconocido · Plazo CISA: 2026-10-11

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

09CVE-2015-5477

ISC · BIND

Ahora · Prioridad 84/100

ISC BIND Data Processing Errors Vulnerability

  • en CISA KEV (explotación confirmada) hace 7 días
  • EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 99.41%Percentil 99.9%

KEV: 2026-10-08 · Ransomware: desconocido · Plazo CISA: 2026-10-11

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

10CVE-2016-3081

Apache · Struts

Ahora · Prioridad 84/100

Apache Struts Command Injection Vulnerability

  • en CISA KEV (explotación confirmada) hace 7 días
  • EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 96.05%Percentil 99.9%

KEV: 2026-10-08 · Ransomware: desconocido · Plazo CISA: 2026-10-11

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

Incorporaciones a KEV · 12 semanas

Semanas ISO; la última está en curso. Escala desde cero.

Ver tabla de datos semanales
Incorporaciones a KEV por semana ISO
SemanaCVEs añadidos
2026-W313
2026-W326
2026-W333
2026-W349
2026-W3511
2026-W3610
2026-W3714
2026-W387
2026-W3912
2026-W406
2026-W415
2026-W426

CISA KEV · actualizado hace 51 min

Fabricantes más explotados (90 días)

Por CVEs incorporados a KEV; no mide ataques ni cuota de mercado.

  1. Microsoft9
  2. Cisco7
  3. Citrix5
  4. Linux5
  5. JFrog4
  6. Check Point3
  7. Fortinet3
  8. Google3
  9. MikroTik3
  10. N-able3

CISA KEV · actualizado hace 51 min

Explora el catálogo

KEV completo + críticas publicadas en 30 días · 3,257 registros (los 10 primeros están arriba) · Orden: prioridad descendente

Limpiar filtros

2511CVE-2026-83282

Oracle Corporation · Oracle Business Intelligence Enterprise Edition

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 12.2.1.4.0. Easily exploita

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.42%Percentil 34.1%

Versiones y rangos reportados
[
  {
    "vendor": "Oracle Corporation",
    "product": "Oracle Business Intelligence Enterprise Edition",
    "versions": [
      {
        "version": "12.2.1.4.0",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  }
]

2512CVE-2026-83283

Oracle Corporation · Oracle Business Intelligence Enterprise Edition

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 12.2.1.4.0. Easily exploita

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.48%Percentil 39.8%

Versiones y rangos reportados
[
  {
    "vendor": "Oracle Corporation",
    "product": "Oracle Business Intelligence Enterprise Edition",
    "versions": [
      {
        "version": "12.2.1.4.0",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  }
]

2513CVE-2026-83327

Oracle Corporation · Oracle Applications Framework

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.46%Percentil 38.3%

Versiones y rangos reportados
[
  {
    "vendor": "Oracle Corporation",
    "product": "Oracle Applications Framework",
    "versions": [
      {
        "version": "12.2.3",
        "status": "affected",
        "lessThanOrEqual": "12.2.15",
        "versionType": "custom"
      }
    ]
  }
]

2514CVE-2026-83339

oracle · webcenter_enterprise_capture

Vigilar · Prioridad 24/100

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.51%Percentil 41.6%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:webcenter_enterprise_capture:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId": "AAB9F9BE-3C88-442C-8C44-61074AFD9A5C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:webcenter_enterprise_capture:14.1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId": "97ECC2BF-A3F1-4011-9697-5B85CA8BBDB4"
          }
        ]
      }
    ]
  }
]

2515CVE-2026-83355

Oracle Corporation · Oracle Enterprise Manager for Fusion Middleware

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: Metrics). Supported versions that are affected are 13.5 and 24.1. Easily exploit

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.48%Percentil 39.8%

Versiones y rangos reportados
[
  {
    "vendor": "Oracle Corporation",
    "product": "Oracle Enterprise Manager for Fusion Middleware",
    "versions": [
      {
        "version": "13.5",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "24.1",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  }
]

2516CVE-2026-83452

oracle · document_management_and_collaboration

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.51%Percentil 41.6%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:document_management_and_collaboration:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "12.2.3",
            "versionEndIncluding": "12.2.15",
            "matchCriteriaId": "166DB5F6-880C-4B57-AB2C-A827009E2DB1"
          }
        ]
      }
    ]
  }
]

2517CVE-2026-83462

Oracle Corporation · Oracle Mobile Application Server

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.51%Percentil 41.6%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:mobile_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "12.2.3",
            "versionEndIncluding": "12.2.15",
            "matchCriteriaId": "DE49F6E5-1CBD-41D7-A409-E2EB66B4FC08"
          }
        ]
      }
    ]
  }
]

2518CVE-2026-83632

Apache Software Foundation · Apache Thrift

Vigilar · Prioridad 24/100

Apache Thrift: C++ THttpTransport grows its line buffer without bound

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.2EPSS 0.38%Percentil 29.8%

Versiones y rangos reportados
[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Thrift",
    "packageURL": "pkg:conan/thrift",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "0.25.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://conan.io/center",
    "packageName": "thrift"
  }
]

2519CVE-2026-83660

adobe · campaign

Vigilar · Prioridad 24/100

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction.

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 10EPSS 0.34%Percentil 25.7%

Versiones y rangos reportados
[
  {
    "operator": "AND",
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*",
            "versionEndIncluding": "7.4.3",
            "matchCriteriaId": "372C9136-435C-4501-9FB8-016600591108"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:adobe:campaign:7.4.4:9400:*:*:classic:*:*:*",
            "matchCriteriaId": "560799AF-A848-47B5-B37C-7B35C8D1B48B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:adobe:campaign:7.4.4:9401:*:*:classic:*:*:*",
            "matchCriteriaId": "FA9301A1-69C2-470A-9520-E865A32B38BF"
          }
        ]
      },
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": false,
            "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          },
          {
            "vulnerable": false,
            "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }
        ]
      }
    ]
  }
]

2520CVE-2026-83944

microsoft · azure_logic_apps

Vigilar · Prioridad 24/100

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 10EPSS 0.44%Percentil 36.5%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:microsoft:azure_logic_apps:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "C6568E5D-75D4-4A94-BFBF-3FA619F9FDD4"
          }
        ]
      }
    ]
  }
]

2521CVE-2026-84031

ibm · guardium_data_protection

Vigilar · Prioridad 24/100

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9EPSS 0.63%Percentil 48.5%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId": "CBA75153-5681-40C8-8EB4-236EF2EC8A4B"
          }
        ]
      }
    ]
  }
]

2522CVE-2026-84064

ibm · guardium_data_protection

Vigilar · Prioridad 24/100

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.63%Percentil 48.8%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId": "CBA75153-5681-40C8-8EB4-236EF2EC8A4B"
          }
        ]
      }
    ]
  }
]

2523CVE-2026-84073

ibm · guardium_data_protection

Vigilar · Prioridad 24/100

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.44%Percentil 36.0%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId": "CBA75153-5681-40C8-8EB4-236EF2EC8A4B"
          }
        ]
      }
    ]
  }
]

2524CVE-2026-84075

ibm · guardium_data_protection

Vigilar · Prioridad 24/100

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet.

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.56%Percentil 44.9%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId": "CBA75153-5681-40C8-8EB4-236EF2EC8A4B"
          }
        ]
      }
    ]
  }
]

2525CVE-2026-84078

ibm · guardium_data_protection

Vigilar · Prioridad 24/100

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentiall

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.47%Percentil 38.8%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId": "CBA75153-5681-40C8-8EB4-236EF2EC8A4B"
          }
        ]
      }
    ]
  }
]

2526CVE-2026-84082

ibm · guardium_data_protection

Vigilar · Prioridad 24/100

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.67%Percentil 50.7%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId": "CBA75153-5681-40C8-8EB4-236EF2EC8A4B"
          }
        ]
      }
    ]
  }
]

2527CVE-2026-84154

Dassault Systèmes · GEOVIA Geospatial Data Manager

Vigilar · Prioridad 24/100

Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.36%Percentil 27.2%

Versiones y rangos reportados
[
  {
    "vendor": "Dassault Systèmes",
    "product": "GEOVIA Geospatial Data Manager",
    "versions": [
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2024x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2024x.FP.CFA.2632",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2025x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2025x.FP.CFA.2637",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2026x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2026x.FP.CFA.2635",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2528CVE-2026-84171

Unknown · WP images upload on piclect

Vigilar · Prioridad 24/100

WP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Upload

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.67%Percentil 50.7%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "WP images upload on piclect",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2529CVE-2026-84244

IBM · Guardium Data Protection

Vigilar · Prioridad 24/100

IBM Guardium Data Protection Cross-Site Scripting

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.18%Percentil 6.5%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId": "CBA75153-5681-40C8-8EB4-236EF2EC8A4B"
          }
        ]
      }
    ]
  }
]

2530CVE-2026-84249

IBM · Guardium Data Protection

Vigilar · Prioridad 24/100

IBM Guardium Data Protection is affected by vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.41%Percentil 33.4%

Versiones y rangos reportados
[
  {
    "vendor": "IBM",
    "product": "Guardium Data Protection",
    "versions": [
      {
        "status": "affected",
        "version": "12.2"
      },
      {
        "status": "affected",
        "version": "12.2.2"
      }
    ],
    "cpes": [
      "cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:guardium_data_protection:12.2.2:*:*:*:*:*:*:*"
    ]
  }
]

2531CVE-2026-84251

Unknown · click5 CRM add-on to Ninja Forms

Vigilar · Prioridad 24/100

click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Arbitrary Options Update

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.11%Percentil 1.0%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "click5 CRM add-on to Ninja Forms",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2532CVE-2026-84252

Unknown · click5 CRM add-on to WPForms

Vigilar · Prioridad 24/100

click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.11%Percentil 1.0%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "click5 CRM add-on to WPForms",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0.3"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2533CVE-2026-84253

Unknown · click5 CRM add-on to Gravity Forms

Vigilar · Prioridad 24/100

click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Arbitrary Options Update

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.11%Percentil 1.0%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "click5 CRM add-on to Gravity Forms",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0.3"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2534CVE-2026-84254

Unknown · click5 CRM add-on to Contact Form 7

Vigilar · Prioridad 24/100

click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Update

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.11%Percentil 1.0%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "click5 CRM add-on to Contact Form 7",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0.4"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2535CVE-2026-84272

IBM · Guardium Data Protection

Vigilar · Prioridad 24/100

IBM Guardium Data Protection Missing Authentication

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.40%Percentil 32.4%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId": "EADF2641-F8DF-4986-8106-287C615DE19D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ibm:guardium_data_protection:12.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId": "0AF72AB8-B3A8-476D-A7E3-3691C9676200"
          }
        ]
      }
    ]
  }
]

2536CVE-2026-84383

strukturag · libheif

Vigilar · Prioridad 24/100

libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.61%Percentil 47.6%

Versiones y rangos reportados
[
  {
    "vendor": "strukturag",
    "product": "libheif",
    "versions": [
      {
        "version": ">= 1.22.0, < 1.23.2",
        "status": "affected"
      }
    ]
  }
]

2537CVE-2026-84388

Fortinet · FortiPAM Chrome Extension

Vigilar · Prioridad 24/100

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to informatio

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.6EPSS 0.38%Percentil 29.7%

Versiones y rangos reportados
[
  {
    "vendor": "Fortinet",
    "product": "FortiPAM Chrome Extension",
    "cpes": [
      "cpe:2.3:a:fortinet:fortipam_chrome_extension:8.0.1:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "8.0.1",
        "status": "affected"
      }
    ]
  }
]

2538CVE-2026-84411

MikroTik · RouterOS

Vigilar · Prioridad 24/100

MikroTik RouterOS Integer Underflow

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.95%Percentil 60.0%

Versiones y rangos reportados
[
  {
    "vendor": "MikroTik",
    "product": "RouterOS",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "7.24",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "7.24"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2539CVE-2026-84412

adobe · campaign

Vigilar · Prioridad 24/100

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 10EPSS 1.25%Percentil 68.5%

Versiones y rangos reportados
[
  {
    "operator": "AND",
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*",
            "versionEndIncluding": "7.4.3",
            "matchCriteriaId": "372C9136-435C-4501-9FB8-016600591108"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:adobe:campaign:7.4.4:9400:*:*:classic:*:*:*",
            "matchCriteriaId": "560799AF-A848-47B5-B37C-7B35C8D1B48B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:adobe:campaign:7.4.4:9401:*:*:classic:*:*:*",
            "matchCriteriaId": "FA9301A1-69C2-470A-9520-E865A32B38BF"
          }
        ]
      },
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": false,
            "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          },
          {
            "vulnerable": false,
            "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }
        ]
      }
    ]
  }
]

2540CVE-2026-84436

ibm · guardium_data_protection

Vigilar · Prioridad 24/100

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root p

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.68%Percentil 50.9%

Versiones y rangos reportados
[
  {
    "operator": "AND",
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId": "CBA75153-5681-40C8-8EB4-236EF2EC8A4B"
          }
        ]
      },
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": false,
            "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }
        ]
      }
    ]
  }
]

2541CVE-2026-84458

zammad · zammad

Vigilar · Prioridad 24/100

Zammad: Account takeover via unverified email matching during SSO auto-link

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.36%Percentil 27.4%

Versiones y rangos reportados
[
  {
    "vendor": "zammad",
    "product": "zammad",
    "versions": [
      {
        "version": "< 7.1.2",
        "status": "affected"
      }
    ]
  }
]

2542CVE-2026-84474

Red Hat · Red Hat Ansible Automation Platform 2.4 for RHEL 8

Vigilar · Prioridad 24/100

Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisionin

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.80%Percentil 55.4%

Versiones y rangos reportados
[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.5.36-1.el8ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.5.36-1.el9ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.6.33-1.el8ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.6.33-1.el9ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.7.17-1.el9ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.6::el10",
      "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.6",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform-26/controller-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1789673739",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.7",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform-27/controller-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1789580684",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
    ]
  }
]

2543CVE-2026-84502

Red Hat · Red Hat Ansible Automation Platform 2.4 for RHEL 8

Vigilar · Prioridad 24/100

Automation-controller: automation-controller-container: automation-controller: project scm_url argument injection into `git ls-remote --upload-pack` yields rce on the controller-task control-plane pod

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.62%Percentil 48.1%

Versiones y rangos reportados
[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.5.36-1.el8ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.5.36-1.el9ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.6.33-1.el8ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.6.33-1.el9ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.7.17-1.el9ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.6::el10",
      "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.6",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform-26/controller-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1789673739",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.7",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform-27/controller-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1789580684",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
    ]
  }
]

2544CVE-2026-84520

apple · macos

Vigilar · Prioridad 24/100

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local attacker may be able to cause unexpected system termination or corrupt kernel memory

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.45%Percentil 36.8%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "7FD79C64-A33E-4DDB-BDE6-4E272788FF66"
          }
        ]
      }
    ]
  }
]

2545CVE-2026-84561

apple · ipados

Vigilar · Prioridad 24/100

A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tv

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.68%Percentil 51.0%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "26.7",
            "matchCriteriaId": "0896A319-539F-45D2-ACA1-7225AE5C06ED"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "26.7",
            "matchCriteriaId": "B331E4FC-727F-403B-8689-E647A51204FD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "15.0",
            "versionEndExcluding": "15.8",
            "matchCriteriaId": "241A56D1-1E33-4317-A053-85AF8E3770B3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "26.0",
            "versionEndExcluding": "26.7",
            "matchCriteriaId": "1BE83000-26C0-49C5-A966-BB40AD6F8BEE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "6BD26C5D-C2F6-4BB6-A1E6-1F5723EA7458"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "6F43E9DC-5D72-4325-9965-E6B50054B8E8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "52C964A6-6BF4-4C0A-9C20-FBDE815AE5DF"
          }
        ]
      }
    ]
  }
]

2546CVE-2026-84609

apple · ipados

Vigilar · Prioridad 24/100

A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.66%Percentil 50.4%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "A6CD209B-5C42-4CC2-BF07-60852D12509A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "8A74637E-2BC7-477F-8996-32A3BE7A10DC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "15.0",
            "versionEndExcluding": "15.8",
            "matchCriteriaId": "241A56D1-1E33-4317-A053-85AF8E3770B3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "26.0",
            "versionEndExcluding": "26.7",
            "matchCriteriaId": "1BE83000-26C0-49C5-A966-BB40AD6F8BEE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "6BD26C5D-C2F6-4BB6-A1E6-1F5723EA7458"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "6F43E9DC-5D72-4325-9965-E6B50054B8E8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "52C964A6-6BF4-4C0A-9C20-FBDE815AE5DF"
          }
        ]
      }
    ]
  }
]

2547CVE-2026-84625

apple · ipados

Vigilar · Prioridad 24/100

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to fingerprint th

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.47%Percentil 38.9%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "A6CD209B-5C42-4CC2-BF07-60852D12509A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "8A74637E-2BC7-477F-8996-32A3BE7A10DC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "7FD79C64-A33E-4DDB-BDE6-4E272788FF66"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "6F43E9DC-5D72-4325-9965-E6B50054B8E8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "52C964A6-6BF4-4C0A-9C20-FBDE815AE5DF"
          }
        ]
      }
    ]
  }
]

2548CVE-2026-84719

Red Hat · Red Hat Ansible Automation Platform 2.4 for RHEL 8

Vigilar · Prioridad 24/100

Automation-controller: automation-controller: workflowjobtemplate /copy/ deep-copy sanitizer omits instance_groups authorization (instancegroup use_role bypass to control-plane)

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.43%Percentil 35.2%

Versiones y rangos reportados
[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.5.36-1.el8ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.5.36-1.el9ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.6.33-1.el8ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.6.33-1.el9ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "automation-controller",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.7.17-1.el9ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.6::el10",
      "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.6",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform-26/controller-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1789673739",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.7",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform-27/controller-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1789580684",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
    ]
  }
]

2549CVE-2026-84734

Unknown · Mindstien Quick Login

Vigilar · Prioridad 24/100

Mindstien Quick Login <= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' Parameter

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.15%Percentil 3.4%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "Mindstien Quick Login",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2550CVE-2026-84737

Unknown · Freeton WP

Vigilar · Prioridad 24/100

Freeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' Parameter

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.15%Percentil 3.4%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "Freeton WP",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2551CVE-2026-84738

Unknown · AF Companion

Vigilar · Prioridad 24/100

AF Companion < 2.2.0 - Shop Manager+ Arbitrary File Upload to RCE

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.82%Percentil 56.1%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "AF Companion",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "2.2.0"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2552CVE-2026-85097

Bricksforge · Bricksforge

Vigilar · Prioridad 24/100

Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.31%Percentil 22.2%

Versiones y rangos reportados
[
  {
    "vendor": "Bricksforge",
    "product": "Bricksforge",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.1.8.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2553CVE-2026-85118

Unknown · AI Content Generator Marketing

Vigilar · Prioridad 24/100

AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.15%Percentil 3.4%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "AI Content Generator Marketing",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2554CVE-2026-85121

Unknown · Insurify

Vigilar · Prioridad 24/100

Insurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesign

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.15%Percentil 3.4%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "Insurify",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2555CVE-2026-85153

Schmooze · Schmooze dating mobile Application

Vigilar · Prioridad 24/100

Information Disclosure Vulnerability in Schmooze dating mobile Application

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.37%Percentil 29.1%

Versiones y rangos reportados
[
  {
    "vendor": "Schmooze",
    "product": "Schmooze dating mobile Application",
    "versions": [
      {
        "status": "affected",
        "version": "Android versions 5.2.7 (build 452) and prior"
      },
      {
        "status": "affected",
        "version": "iOS versions 5.2.1 and prior"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2556CVE-2026-85185

Canonical · LXD

Vigilar · Prioridad 24/100

Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.6EPSS 0.36%Percentil 27.9%

Versiones y rangos reportados
[
  {
    "vendor": "Canonical",
    "product": "LXD",
    "platforms": [
      "Linux"
    ],
    "packageName": "LXD",
    "repo": "https://github.com/canonical/lxd",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.2",
        "lessThan": "4.0.14",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.0.0",
        "lessThan": "5.0.10",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.21.0",
        "lessThan": "5.21.8",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.0",
        "lessThan": "6.10",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2557CVE-2026-85192

regularlabs.com · Conditional Content Pro extension for Joomla

Vigilar · Prioridad 24/100

Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.4EPSS 0.67%Percentil 50.4%

Versiones y rangos reportados
[
  {
    "defaultStatus": "unaffected",
    "packageName": "plg_system_conditionalcontent",
    "product": "Conditional Content Pro extension for Joomla",
    "vendor": "regularlabs.com",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0-7.1.0"
      }
    ]
  }
]

2558CVE-2026-85385

concretecms · concrete_cms

Vigilar · Prioridad 24/100

Concrete CMS below 9.5.4 did not validate the user timezone value (uTimezone) on write and rendered it without output encoding on the Dashboard user management page, where Date::getTimezoneDisplayName

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.6EPSS 0.50%Percentil 41.2%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "9.5.4",
            "matchCriteriaId": "054F5125-9FDE-4D97-BDFB-D1216117DA02"
          }
        ]
      }
    ]
  }
]

2559CVE-2026-85497

CareCam · HMT.CM2507 Firmware

Vigilar · Prioridad 24/100

CareCam CM2507 Use of Password Hash With Insufficient Computational Effort

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.34%Percentil 25.9%

Versiones y rangos reportados
[
  {
    "vendor": "CareCam",
    "product": "HMT.CM2507 Firmware",
    "versions": [
      {
        "status": "affected",
        "version": "v251211.1507"
      }
    ],
    "defaultStatus": "affected"
  }
]

2560CVE-2026-85500

team-alembic · ash_authentication

Vigilar · Prioridad 24/100

`require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.77%Percentil 54.3%

Versiones y rangos reportados
[
  {
    "collectionURL": "https://repo.hex.pm",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.AshAuthentication.Strategy.Password.Actions'"
    ],
    "packageName": "ash_authentication",
    "packageURL": "pkg:hex/ash_authentication",
    "product": "ash_authentication",
    "programFiles": [
      "lib/ash_authentication/strategies/password/actions.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.AshAuthentication.Strategy.Password.Actions':check_user/2"
      },
      {
        "name": "'Elixir.AshAuthentication.Strategy.Password.Actions':sign_in_with_token/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Strategy.Password.Actions':register/3"
      }
    ],
    "repo": "https://github.com/team-alembic/ash_authentication",
    "vendor": "team-alembic",
    "versions": [
      {
        "lessThan": "4.15.0",
        "status": "affected",
        "version": "4.3.8",
        "versionType": "semver"
      },
      {
        "lessThan": "5.0.0-rc.14",
        "status": "affected",
        "version": "5.0.0-rc.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.AshAuthentication.Strategy.Password.Actions'"
    ],
    "packageName": "team-alembic/ash_authentication",
    "packageURL": "pkg:github/team-alembic/ash_authentication",
    "product": "ash_authentication",
    "programFiles": [
      "lib/ash_authentication/strategies/password/actions.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.AshAuthentication.Strategy.Password.Actions':check_user/2"
      },
      {
        "name": "'Elixir.AshAuthentication.Strategy.Password.Actions':sign_in_with_token/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Strategy.Password.Actions':register/3"
      }
    ],
    "repo": "https://github.com/team-alembic/ash_authentication",
    "vendor": "team-alembic",
    "versions": [
      {
        "changes": [
          {
            "at": "17f4c25a372d1778c9cc457759e6357570d83711",
            "status": "unaffected"
          },
          {
            "at": "1076639a9d40213088d110c79ba6735b8cc85b16",
            "status": "unaffected"
          }
        ],
        "lessThan": "*",
        "status": "affected",
        "version": "7d37bc6e4df6697b5813d2f373f0fdb08f813f98",
        "versionType": "git"
      }
    ]
  }
]
Cómo calculamos la prioridad

La señal principal es qué tan reciente es la explotación confirmada. Ahora: entró a CISA KEV hace ≤ 30 días, o hace ≤ 90 días y está ligada a ransomware o tiene percentil EPSS ≥ 95. Esta semana: KEV del último año; KEV de cualquier edad con ransomware y percentil EPSS ≥ 95; o CVSS ≥ 9 con percentil EPSS ≥ 80 aunque no esté en KEV. Vigilar: KEV más antiguos sin esas señales y críticas sin evidencia de explotación. Baja: resto. Bases 70 / 45 / 20 / 0; sumamos ransomware +8, percentil ≥ 95 +5 o ≥ 80 +3, CVSS ≥ 9 +4 o ≥ 7 +2 y hasta +10 por recencia en KEV; las bandas no se traslapan (máximo 97 / 75 / 44 / 19). Los plazos CISA vencidos no suben la prioridad: obligan a agencias federales de EE. UU., no a todos; un plazo en los próximos 14 días sí se muestra como razón. No es una probabilidad ni una evaluación de tu entorno. Los datos faltantes limitan la confianza; no equivalen a riesgo cero.