Saltar al contenido principal

Inteligencia pública · Sin registro

Qué se explota. Qué atender primero.

Prioriza con evidencia de explotación, probabilidad e impacto. No es un inventario completo ni confirma que tu equipo esté afectado: verifica producto y versión.

Explotándose (CISA KEV)

1,745

CVEs con explotación observada

CISA KEV · actualizado hace 1 h

Incorporaciones a KEV

+6

esta semana / +35 en 30 días

CISA KEV · actualizado hace 1 h

Ligadas a ransomware

361

CISA KEV · actualizado hace 1 h

Críticas nuevas (7 días)

431

10 con EPSS alto de 353 con EPSS publicado

NVD · actualizado hace 1 h

CVE.org · actualizado hace 1 h

FIRST EPSS · actualizado hace 1 h

Semana = últimos 7 días UTC, incluido hoy. KEV registra explotación observada, no ataques en curso ni su cantidad. EPSS estima probabilidad a 30 días; alto = percentil ≥ 80. Corte: 15/10/2026, 1:47:06 a.m. UTC.

Prioriza ahora

Hasta 10 CVEs de mayor prioridad para los filtros elegidos. Confirma exposición y aplica mitigaciones o parches del fabricante.

01CVE-2026-104935

Ivanti · Connect Secure

Ahora · Prioridad 87/100

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

  • en CISA KEV (explotación confirmada) hace 2 días
  • EPSS en percentil ≥ 95
  • plazo CISA en 1 día

CVSS 8.6EPSS 25.98%Percentil 98.0%

KEV: 2026-10-13 · Ransomware: desconocido · Plazo CISA: 2026-10-16

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "25.1.0.0",
            "versionEndExcluding": "25.1.1.2",
            "matchCriteriaId": "51F9201D-EF2F-4750-846E-912827761A9F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "25.1.2.0",
            "versionEndExcluding": "25.1.3.0",
            "matchCriteriaId": "822E7CEB-9AB2-4B0E-B87A-B9718503466A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2:*:*:*:*:*:*",
            "matchCriteriaId": "56FEC223-8FF7-4A05-9577-CFFE0AA6526C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.1:*:*:*:*:*:*",
            "matchCriteriaId": "5569D323-6ADF-4B16-822D-FBA6760356C3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.2:*:*:*:*:*:*",
            "matchCriteriaId": "FF4D400F-49DA-4C5F-8F63-5A15738360AE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.3:*:*:*:*:*:*",
            "matchCriteriaId": "9CA7EF35-D0BC-4714-A38A-91660BE1BA55"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.4:*:*:*:*:*:*",
            "matchCriteriaId": "F22EC396-A447-4175-8A30-C8DC10ACFFE9"
          }
        ]
      }
    ]
  }
]

02CVE-2026-76460

Cisco · Identity Services Engine

Ahora · Prioridad 86/100

Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

  • en CISA KEV (explotación confirmada) hace 29 días
  • EPSS en percentil ≥ 95
  • CVSS crítico ≥ 9

CVSS 10EPSS 14.03%Percentil 96.5%

KEV: 2026-09-16 · Ransomware: desconocido · Plazo CISA: 2026-09-19

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "7A789B44-7E6C-4FE9-BD40-702A871AB8AC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "93920663-445E-4456-A905-81CEC6CA1833"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "DF9CCBFA-0004-48F7-B142-6FDD4B3E1081"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "C91717BE-76EF-410C-970D-01C5FDC52A0B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "33DA5BB8-4CFE-44BD-9CEB-BC26577E8477"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "D3AEFA85-66B5-4145-A4AD-96D1FF86B46D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "7A6A0697-6A9E-48EF-82D8-36C75E0CDFDC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "E939B65A-7912-4C36-8799-03A1526D7BD3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "833B438F-0869-4C0D-9952-750C00702E8D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "E8B2588D-01F9-450B-B2E3-ADC4125E354E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "E41016C0-19E6-4BCC-A8DD-F6C9A2B0003E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "654E946A-07C5-4036-BC54-85EF42B808DD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "7932D5D5-83E1-4BEF-845A-D0783D4BB750"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "1B818846-4A6E-4256-B344-281E8C786C43"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "1EEC9040-9BD3-43D0-A33E-1EBD941EB65F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "A44858A2-922A-425A-8B38-0C47DB911A3C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "53484A32-757B-42F8-B655-554C34222060"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "0CCAC61F-C273-49B3-A631-31D3AE3EB148"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "B452B4F0-8510-475E-9AE8-B48FABB4D7D3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "5733512D-12B5-4098-AF90-9D68217FAC27"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "4ED98020-7BAF-4E5E-8B7B-22537200C283"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "4C6839DC-F3A2-4133-BF60-2E678E6DD4A4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "43F3A55D-D4FC-4D93-9513-94B64B21A2B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "F0F60A00-E952-400A-B553-BE96E7FF746F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "FF8B81A6-BF44-4E5F-B167-39F61DDCA026"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "56E0F0EC-3E66-4866-89F5-89B331F3F517"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "2E3E8937-2859-4A2A-91C0-05F674EF0466"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "D4B14684-EB9E-405B-85FA-B62E57CB292C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "22B752D1-9E8F-4FB7-8EEB-F9234492372B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "85A1CC7D-FE54-4AC0-B98F-972C4B1F3189"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "D23905E0-E525-49B1-8E5F-4EB42D186768"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "74509498-38EF-4345-9583-CEF5C26CA1D8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "CD05FF93-7B8C-4283-9DB7-E03FE98FAADF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "0F9B6A8E-E773-44A3-9266-878F0C58EB41"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "D3727619-E0CA-4CA9-BE35-0C732BCF1741"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "2CFB7565-3930-409C-B5DB-CE77E6ED7C42"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "A388D916-D6A1-4D3A-A48A-A150F387B755"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "2610FD35-BC4B-41B7-9C92-E6E5264FEE54"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "3FEE4377-B238-4442-9892-28CECFB2319E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "6598563B-7E32-43FB-96A7-88C53E4CE226"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "719C8E82-269D-4F21-B2B4-4CD3033A17F9"
          }
        ]
      }
    ]
  },
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "006E0D77-534C-447F-8E97-EC0AB906D978"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "AC07A742-D194-425C-945C-3977E96B61B8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "00D4B446-EDCE-41DC-A03B-97D8A371B0D9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "BE3B2985-AC34-4628-8564-517C48B9F475"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "97787372-9A0D-4916-A7A2-19237B84419F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "2E2D9D7C-A36E-489D-A2E1-ACE9E9C399BD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "3ABA57DA-78C9-489B-88E5-6E5275E53388"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "2ABFB0CE-60CF-4969-A91E-186F457C8014"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "B8CF7EF0-FBAA-47C7-8386-F67264CA8D0E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "5F08ACD7-2867-428A-966C-6509283FCA10"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "B365970F-9239-45F8-80C6-DA426FCA2E32"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "5A66142F-712F-4EFA-9FC4-E499D3015DD2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "50D8B7DD-14A8-4C67-8B32-E1F9C7D9C01E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "CB65DFF8-33D8-4840-8A63-7C4797FF0B51"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "9CAAF565-E1CF-4002-B91C-290ECAB2F16A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "890FDA62-DED9-401B-9D44-26F3624118CD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "604079BA-78F5-4D20-AF27-E7A9A899DA0C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "25344C6F-8EB6-4709-A51B-DCA26AA885E3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "51DE5AD0-5DFA-460D-B22D-0F5E367A9A28"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "683F2E87-9759-4A98-B7C9-489E74837D59"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "22BF8687-84E4-4609-8100-FD2408DF3247"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "19F88640-BC3E-42D2-ADDC-59114974103C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "40A94055-EF01-4799-813D-7BFFDD13C685"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "3CA3315D-8A45-43F4-A0F0-094D325F285B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "B3736136-9FD8-4B12-B119-EA15201224D9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "FB15AE6D-F4EF-40AD-A88E-D22612AEF2A4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "25B8E5EB-393A-40E8-9A0D-465ECCC2A4B8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "654ED77E-22D3-4E76-9E6D-B1581F5982F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "A0648EE9-F042-479F-9AAB-C6B5DBC46511"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "83F3BA58-4F38-41C8-956F-38A2F44EECE4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "6C30FA1D-91E2-48C5-B181-A88FDF668278"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "768215B1-80B7-40FF-8772-BA4C0B3913F5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "40239DA8-43B6-466B-85B0-6D644D7027D1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "9118B7ED-E678-47C3-9D17-F522D9362B2F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "C2ED3257-CB9D-4FD5-A482-3648CF292128"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "CC0525FD-C4D7-4B48-BF35-1791391AB148"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "68C96F6B-51EE-4D03-9598-CBFD16DA22EF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "62F25185-D19E-4EC5-8A68-7AB669B76E90"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "C457D2EC-FB63-49B7-A90E-CE67ED763BAE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "6566330F-A048-44A1-9821-7A5844C82CEC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "1154F196-2CB3-4AC2-BE00-11A8942EA999"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "7E30ECF6-5B1D-4280-AA02-123153E68F28"
          }
        ]
      }
    ]
  }
]

03CVE-2026-93616

Check Point · Multiple Products

Ahora · Prioridad 86/100

Check Point Multiple Products Path Traversal Vulnerability

  • en CISA KEV (explotación confirmada) hace 23 días
  • EPSS en percentil ≥ 95
  • CVSS crítico ≥ 9

CVSS 9.8EPSS 19.65%Percentil 97.4%

KEV: 2026-09-22 · Ransomware: desconocido · Plazo CISA: 2026-09-25

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "r80",
            "versionEndExcluding": "r81.10",
            "matchCriteriaId": "46543FA9-C054-4F64-B6A9-37191C09C8BC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "A2428B4E-3754-44B5-9C21-AE9F7746A440"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_106:*:*:*:*:*:*",
            "matchCriteriaId": "BA42413E-A16A-4D83-BD08-C44D2272B352"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "B55EFDA0-B970-4EB0-A1B8-FE10E3FF1D39"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_109:*:*:*:*:*:*",
            "matchCriteriaId": "8A5711F6-13C5-4C50-ADE2-8E9465BEABCB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_110:*:*:*:*:*:*",
            "matchCriteriaId": "8F71DADF-125C-458F-81E2-A572527C10C6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "2C1FE1CC-4FA9-420A-8F7A-E180027F1A33"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_128:*:*:*:*:*:*",
            "matchCriteriaId": "C38E5B49-3074-48F3-A623-7C86C27204C6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_129:*:*:*:*:*:*",
            "matchCriteriaId": "CD9E8386-0220-4A94-87FD-D9E663983AFA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_130:*:*:*:*:*:*",
            "matchCriteriaId": "A5ACC58D-34A8-4D04-98C6-8DFF9465DC60"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_131:*:*:*:*:*:*",
            "matchCriteriaId": "78074569-7B81-440B-BEDA-5F1B6002CA57"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_132:*:*:*:*:*:*",
            "matchCriteriaId": "CD9E6258-DF53-4E47-9DE5-109F3E5F5A71"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_135:*:*:*:*:*:*",
            "matchCriteriaId": "BB44CD33-CDC4-4D51-A897-2EF8E108546B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_139:*:*:*:*:*:*",
            "matchCriteriaId": "8DBDF8B8-5A70-427B-91F1-7678D3CC281C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "964C5CDC-D605-4A4F-B1E8-92BE59EDA34A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "B6A031A8-D79B-461C-A613-C9D922709A8C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_150:*:*:*:*:*:*",
            "matchCriteriaId": "4DACDF4E-DDDF-4C32-9E36-8F41370BDBBA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_152:*:*:*:*:*:*",
            "matchCriteriaId": "C25851DF-54C5-40EE-BCFF-3E65EBBB1564"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_156:*:*:*:*:*:*",
            "matchCriteriaId": "B029BBE5-EAEC-4E10-A7FE-45ABB458D85B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "75529BA5-943C-46D6-9C33-18D1EEB8063A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_165:*:*:*:*:*:*",
            "matchCriteriaId": "F08CD952-5857-4C7D-8982-389A9DCC8309"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_169:*:*:*:*:*:*",
            "matchCriteriaId": "75BBDB88-78C3-47E1-848C-B8BAA7B284E0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_170:*:*:*:*:*:*",
            "matchCriteriaId": "AB9581B4-B2FA-4946-9674-391FE35E5B67"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_171:*:*:*:*:*:*",
            "matchCriteriaId": "5E34C44D-5F7A-4260-9B48-D333932F9A61"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_172:*:*:*:*:*:*",
            "matchCriteriaId": "5C9D465A-61AF-4921-B814-9917F7ADE4CA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_173:*:*:*:*:*:*",
            "matchCriteriaId": "4B3D629E-119E-46DE-ACF0-F939E0E44B32"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_174:*:*:*:*:*:*",
            "matchCriteriaId": "F55AD3DF-EE8A-421D-B430-77ABC7670AB4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_177:*:*:*:*:*:*",
            "matchCriteriaId": "AB895616-A0B0-4CF8-A915-AEFBFADECF75"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_181:*:*:*:*:*:*",
            "matchCriteriaId": "11BD9477-949D-436C-A724-7C0DD5755C1A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_183:*:*:*:*:*:*",
            "matchCriteriaId": "20A8D3F6-45C7-4985-8EF2-399274E6466A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_187:*:*:*:*:*:*",
            "matchCriteriaId": "043058AE-6D16-494F-8489-B9F87F0CBDD9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_190:*:*:*:*:*:*",
            "matchCriteriaId": "CFC597DF-66DC-46E7-A31A-82D253A70E7F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_22:*:*:*:*:*:*",
            "matchCriteriaId": "8793BA9A-096E-4E58-A73C-E60C6E010019"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_30:*:*:*:*:*:*",
            "matchCriteriaId": "993ECDA4-9028-46DB-853E-AF07153A6F94"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "7A4F9499-F5B5-4CA3-BED3-F2909AEB7F7C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "4809F58C-906A-4DFB-8520-EC92A4A6FE43"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "3EDB5D74-5C06-472B-A442-D9940B7885D0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_55:*:*:*:*:*:*",
            "matchCriteriaId": "CEB4451F-3296-49E8-B171-BD06167C16D0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_61:*:*:*:*:*:*",
            "matchCriteriaId": "FA3DEADA-8C44-4F7D-BE4D-004C3B97950C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_66:*:*:*:*:*:*",
            "matchCriteriaId": "FFFA1CC6-612A-4701-BFE1-B7AC97B2921F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_75:*:*:*:*:*:*",
            "matchCriteriaId": "1778DF16-6C1E-4228-ACF8-EC94EF0BC884"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_78:*:*:*:*:*:*",
            "matchCriteriaId": "EABB856E-E059-493F-B359-ED9FE39E2637"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "AE129711-6F49-4A3E-A0A1-F64A7655E18F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_81:*:*:*:*:*:*",
            "matchCriteriaId": "EAC196AC-EF63-43F9-BE27-11807E4200DC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_82:*:*:*:*:*:*",
            "matchCriteriaId": "527ED156-030A-4785-811A-9A1D226B9F76"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_85:*:*:*:*:*:*",
            "matchCriteriaId": "C99694F6-A7D0-47A4-BC54-938BC81F7D54"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_87:*:*:*:*:*:*",
            "matchCriteriaId": "4410B9E8-BB15-4A3C-98E2-CF6E259FF74E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_9:*:*:*:*:*:*",
            "matchCriteriaId": "68864C91-5D68-46A3-A671-61EBA3D86762"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_93:*:*:*:*:*:*",
            "matchCriteriaId": "336F50C0-B258-406F-9C56-A20C1ADF9F36"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_94:*:*:*:*:*:*",
            "matchCriteriaId": "5CFFD6BE-1679-4462-A20F-8AF76E3566CD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_95:*:*:*:*:*:*",
            "matchCriteriaId": "FBBBCC15-698D-4B75-8CC6-212870CA29AC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "60E5A48C-4ABB-46DB-BA75-132AFB408BC8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "BD16B955-141C-4F13-A9BC-6CCCD96248B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_101:*:*:*:*:*:*",
            "matchCriteriaId": "F70DA99D-131C-46CC-B582-CB9419DB1B64"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "B06457A0-ED12-4412-BB1D-1D24E0C751EA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_105:*:*:*:*:*:*",
            "matchCriteriaId": "FD7D44D8-C2D1-46C4-B9E4-29664BCFEAB4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_111:*:*:*:*:*:*",
            "matchCriteriaId": "3A7EF92D-B4CC-4868-9026-8F5DA0D14DFC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "4347D905-4E57-4D64-9B57-C406A70DC0C1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_115:*:*:*:*:*:*",
            "matchCriteriaId": "12E1E158-790D-40D4-81FF-622307C4524E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "01DA6EEA-746F-4EB2-81C5-F7C064519D44"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_119:*:*:*:*:*:*",
            "matchCriteriaId": "AD575960-0B66-48F9-BC9D-6F7DAEF0BCBC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_120:*:*:*:*:*:*",
            "matchCriteriaId": "776DF4D6-9CC1-4BC2-93D0-9DE2405716EA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "C0AABCDA-255E-4096-8DEF-483E0373E7F7"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "236CB75E-705A-46B3-A531-29E343AA024A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_127:*:*:*:*:*:*",
            "matchCriteriaId": "D1A5645A-D22D-4B5B-86FA-29642111FEDF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "B90AA06D-C905-4811-A93A-44F787563FB0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "8A1BC954-296C-4A94-847D-479825CDA84C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_146:*:*:*:*:*:*",
            "matchCriteriaId": "BADA45FE-319D-421F-B4B6-D221D78B69CC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "131ADAE9-9514-4C12-BE4D-312EB16F2E24"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_161:*:*:*:*:*:*",
            "matchCriteriaId": "9D912106-DC05-42B9-914B-A559ED20CAB6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_166:*:*:*:*:*:*",
            "matchCriteriaId": "31D18E59-D406-4263-83B1-F9267667AE1E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "CBA6E4FC-BDCC-425F-9D69-E9183548893A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_26:*:*:*:*:*:*",
            "matchCriteriaId": "6DF70422-7897-49CC-8874-A96D4CA64E11"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "F3240200-0517-43FD-BED2-D8AF844BF6E6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "BE6FBF0A-195F-4E52-9FBF-CD9A71EF3A36"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "57B969D9-DCC0-4B06-818F-CE2521C4C0C0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "CA897E69-E1CE-45A1-A0DB-A7BF444484F3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_53:*:*:*:*:*:*",
            "matchCriteriaId": "A13B8B4D-D746-432A-8833-BDF3A5A13CB4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_54:*:*:*:*:*:*",
            "matchCriteriaId": "CF0A7585-591D-4FA1-941E-55FB0207C207"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_65:*:*:*:*:*:*",
            "matchCriteriaId": "2A5B10FC-D9B5-4BB2-AD82-0B9AFB2AD0DE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_70:*:*:*:*:*:*",
            "matchCriteriaId": "ECE1DDA0-9A0A-44D5-919E-24810E7131B0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_76:*:*:*:*:*:*",
            "matchCriteriaId": "491F74B1-998F-459A-A27D-EB01597C9B01"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "A31115EC-8018-4EF3-B5D0-0F1EA2392680"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_8:*:*:*:*:*:*",
            "matchCriteriaId": "E415D02C-B30A-4210-8F14-47ABF46D4E64"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_84:*:*:*:*:*:*",
            "matchCriteriaId": "27AED864-AC5B-4FCF-9FD7-6E0D49569BB2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_89:*:*:*:*:*:*",
            "matchCriteriaId": "ABF3E632-8D50-4373-9576-0E710511D21B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_90:*:*:*:*:*:*",
            "matchCriteriaId": "C6229824-D7A7-439E-9FDD-95F753061410"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_92:*:*:*:*:*:*",
            "matchCriteriaId": "B218B25D-7722-435C-AA22-B5411E786277"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_96:*:*:*:*:*:*",
            "matchCriteriaId": "7A49ABD5-57B9-4E06-AFFE-8A1269BB16C8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_98:*:*:*:*:*:*",
            "matchCriteriaId": "3BFA1E0F-A214-4150-A0BD-44B5424A667E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_99:*:*:*:*:*:*",
            "matchCriteriaId": "265683A2-DA16-4CDC-AE9D-CE14BAB28A79"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:-:*:*:*:*:*:*",
            "matchCriteriaId": "2D16C37E-3064-4E15-8590-3B3020E4FF7E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "C01C66D8-5B48-4255-8246-9301EEA863DA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "22A0D74F-5216-40D9-B07C-8789A8E2D328"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "F2C763B7-B4BD-4915-A33B-9675DC2A1EA5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "1844D63C-499D-4185-B1B5-89FBE609F8FA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_12:*:*:*:*:*:*",
            "matchCriteriaId": "EC227225-ECF6-4025-B288-992ADE9B6B4B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "C7BF37CC-BE7A-4DDD-B5DA-8216B6FE9D44"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "7FD699CE-41C5-4A8D-BE52-35CBF1F16C96"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "673F8F1B-E64E-44D1-A793-F2B4ED56DDBD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_18:*:*:*:*:*:*",
            "matchCriteriaId": "927823EC-B157-4B5C-A4A3-F9D249C88E2C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "0DBDDAA3-3CA1-4490-8D43-C8C5C5188A6E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_25:*:*:*:*:*:*",
            "matchCriteriaId": "73AEA72B-8E44-4839-8651-5076EBC609B1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_33:*:*:*:*:*:*",
            "matchCriteriaId": "B11AA664-F3C8-44A6-AD11-14AF6AFAD2E2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_34:*:*:*:*:*:*",
            "matchCriteriaId": "0D511D85-A534-49A5-A9AE-88BC624311B6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "B0A2B178-FC15-4D76-9075-D605F87F350D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_39:*:*:*:*:*:*",
            "matchCriteriaId": "1360EBA1-B59B-472E-9019-9EB560A05699"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "F1301887-F38A-4FE6-9614-1FCF8FDE681C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "74DA6820-BE56-4115-A058-45CFF400DAA6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "54ECA176-C752-42C6-A9B2-CF408D8C580E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_60:*:*:*:*:*:*",
            "matchCriteriaId": "D2E35CA7-FED1-44E9-B144-1B51A2D7FB8B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_73:*:*:*:*:*:*",
            "matchCriteriaId": "DBA345D3-0FE7-4BE9-BEBB-96CD4055E546"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_91:*:*:*:*:*:*",
            "matchCriteriaId": "E2D4A292-EE3B-4A3A-9B16-E03626F82832"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "9381DBDF-5CE2-454C-BE04-859C9A197C90"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "F7442AF7-C511-4A15-AA85-FCB741F6A733"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "B9E02250-00AF-4684-A9A0-E9E4032DEA66"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "AC444B54-CFE5-4B7C-A885-9DE87394B132"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_40:*:*:*:*:*:*",
            "matchCriteriaId": "9B722ECE-8995-4D34-AC3B-3CEAF1FDAA08"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "E8D09FD6-5DC3-4C3A-8598-E91F86C5F657"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_6:*:*:*:*:*:*",
            "matchCriteriaId": "27057734-9870-4BA0-9A29-DB03FDFE485F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "E29151E7-2021-4553-8F70-AAE4AAB10188"
          }
        ]
      }
    ]
  },
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "r80",
            "versionEndExcluding": "r81.10",
            "matchCriteriaId": "B7EA18CB-4869-48C3-A9BC-0B0A6580FF1A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "E3EFE5C0-04CD-4B17-AD14-5035C2969047"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_106:*:*:*:*:*:*",
            "matchCriteriaId": "59FBDFE0-B5D7-44B5-B8A4-7ED87D8D1C13"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "BB2A0A91-CB75-455E-AA39-A4A79C8B574C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_109:*:*:*:*:*:*",
            "matchCriteriaId": "A8EFFC09-DF62-41C5-A719-30CC9D323F96"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_110:*:*:*:*:*:*",
            "matchCriteriaId": "C330AA5D-155B-4B29-968F-3A2B95EE7FAC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "653CF951-198E-4378-82E6-145052CF388A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_128:*:*:*:*:*:*",
            "matchCriteriaId": "8819E6BD-A6E0-4BC5-8BA8-A227266120E6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_129:*:*:*:*:*:*",
            "matchCriteriaId": "B5A0A754-1D52-4C50-80F3-CEB12F67E5AB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_130:*:*:*:*:*:*",
            "matchCriteriaId": "7444A711-160A-4B65-955A-509C0A169A6D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_131:*:*:*:*:*:*",
            "matchCriteriaId": "D11061E3-C47D-4B72-9226-960965DF73F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_132:*:*:*:*:*:*",
            "matchCriteriaId": "4DD733B2-3D1B-4EDF-B6E3-1F04089CDFF5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_135:*:*:*:*:*:*",
            "matchCriteriaId": "0FDDB709-B86E-4EF0-BFFF-E866F5AC13BE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_139:*:*:*:*:*:*",
            "matchCriteriaId": "3C2F9CF0-6684-4353-A4A1-7D117CF8032D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "EE2DD8DD-3060-4029-AE0E-861DE3EF6C3F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "F19DC5F4-4F3D-47E9-9EE1-71EC0FDF2D17"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_150:*:*:*:*:*:*",
            "matchCriteriaId": "76101CB6-BD1F-4E0D-BB88-9CC7EA3E84C8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_152:*:*:*:*:*:*",
            "matchCriteriaId": "A7628981-6822-44C0-82AC-43BE06DEA3E3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_156:*:*:*:*:*:*",
            "matchCriteriaId": "BBB95805-9CCC-4220-B4C1-BF5535968998"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "7E441395-16C7-4AFD-BCE5-B7CCED66AEC3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_165:*:*:*:*:*:*",
            "matchCriteriaId": "93B0F1EF-1EA1-45A3-ABE1-0BA9E29E8820"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_169:*:*:*:*:*:*",
            "matchCriteriaId": "41F7E1A6-F1FA-409A-A8BF-40DDB5EB00FF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_170:*:*:*:*:*:*",
            "matchCriteriaId": "D3CC56EB-2456-485F-B7DF-B3F25FB99554"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_171:*:*:*:*:*:*",
            "matchCriteriaId": "5EEC17E9-CEF9-4FB2-B1D9-43728013D096"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_172:*:*:*:*:*:*",
            "matchCriteriaId": "727BE9AD-AF6C-4159-9932-496480C8B436"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_173:*:*:*:*:*:*",
            "matchCriteriaId": "A0B43191-7C2E-46EE-825C-05000A7FBFEC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_174:*:*:*:*:*:*",
            "matchCriteriaId": "40EBD18C-3A36-43DA-B045-631CC7517F25"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_177:*:*:*:*:*:*",
            "matchCriteriaId": "8891CA25-BB20-4A71-90CA-B94422B71EA5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_181:*:*:*:*:*:*",
            "matchCriteriaId": "40776587-1731-4579-A8C6-619DB6DDD3F2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_183:*:*:*:*:*:*",
            "matchCriteriaId": "268462D2-87BD-4144-9255-163DB1711917"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_187:*:*:*:*:*:*",
            "matchCriteriaId": "858E5667-5661-4DC9-9017-498F0C107699"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_190:*:*:*:*:*:*",
            "matchCriteriaId": "DD908FC8-7991-41F9-87C1-45DA624B24B5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_22:*:*:*:*:*:*",
            "matchCriteriaId": "39876606-2D2B-49FC-9A7F-9A564418EB8C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_30:*:*:*:*:*:*",
            "matchCriteriaId": "A3F582E0-A364-4B88-9C06-3796707745FD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "8490D7B3-4553-457F-A89C-136911626C70"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "59CA7C8E-63D3-48D4-AA6F-DEB270976A5E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "D6E1781C-58C6-4336-9354-40166B88B6C5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_55:*:*:*:*:*:*",
            "matchCriteriaId": "7A05B5FE-A04D-4A75-A1A6-89BB2A00A0E1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_61:*:*:*:*:*:*",
            "matchCriteriaId": "7101AE06-0C27-4A04-A232-10E4327A9C18"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_66:*:*:*:*:*:*",
            "matchCriteriaId": "47EE9CF9-65D8-4DB3-82EA-ECC20447B037"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_75:*:*:*:*:*:*",
            "matchCriteriaId": "0E784373-CFE7-4598-809F-5C4DBCEF70AA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_78:*:*:*:*:*:*",
            "matchCriteriaId": "AEF420B8-0D77-47B1-A19E-9311BD86CA6E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "B5B93BB5-16BB-452A-97D5-10C7772F660F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_81:*:*:*:*:*:*",
            "matchCriteriaId": "A1F6B14B-40C5-4FEF-BC85-84E4B4361079"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_82:*:*:*:*:*:*",
            "matchCriteriaId": "3ECC6338-F541-449F-AD62-9D852F4E7454"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_85:*:*:*:*:*:*",
            "matchCriteriaId": "B14FD6AB-A559-49B9-9C97-978647042EAC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_87:*:*:*:*:*:*",
            "matchCriteriaId": "D6F74C50-FB32-446F-94FF-F5342D56741A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_9:*:*:*:*:*:*",
            "matchCriteriaId": "B531E951-4293-45C1-A779-9B7052704AC8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_93:*:*:*:*:*:*",
            "matchCriteriaId": "FCA346D0-0D8E-4FB4-AE11-E0A062A339BD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_94:*:*:*:*:*:*",
            "matchCriteriaId": "9F6F7CC6-CC82-40BE-88FE-0A2B43ACA314"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_95:*:*:*:*:*:*",
            "matchCriteriaId": "7C669D64-A6B6-495A-BBC2-62B6947978E0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "A8F7304B-C04F-4C5B-9E98-D736C55A0AE2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "A897D6EA-56D9-4246-9985-9BCE0B5B575E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_101:*:*:*:*:*:*",
            "matchCriteriaId": "A93B1873-08AD-45D4-9F27-D76DEBD445E4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "C29DD086-7438-45BD-B1DC-B20D2753A7E2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_105:*:*:*:*:*:*",
            "matchCriteriaId": "A7792771-5225-4B15-8B12-94AC5DB158D8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_111:*:*:*:*:*:*",
            "matchCriteriaId": "54CF3193-F101-4BD9-952F-47886308799B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "F012878A-86CE-4881-94C1-CA39420E2888"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_115:*:*:*:*:*:*",
            "matchCriteriaId": "E8A50B35-2459-43C2-840B-D3BC78837C6A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "C62D9794-379F-4722-B467-0CFE65A12B80"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_119:*:*:*:*:*:*",
            "matchCriteriaId": "D92A32EE-259C-423B-B422-A765EF4426F9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_120:*:*:*:*:*:*",
            "matchCriteriaId": "668D309B-DA82-4EC4-9F09-A5772BC17447"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "1230C289-7789-471F-9EA3-2FE2DCDA6981"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "96187221-D11F-4CFA-83AD-0548A528C320"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_127:*:*:*:*:*:*",
            "matchCriteriaId": "AF79E967-AEE7-494E-B8E4-94ABFE8BEFB7"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "E450F71D-626F-4515-91A2-5F4FCD8FE21D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "6E73C0C0-227D-42EA-9E5F-BD9120E94213"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_146:*:*:*:*:*:*",
            "matchCriteriaId": "926F2DA0-8168-4EED-BB8E-E9A7BC185970"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "5B16C81F-361A-475A-A7EF-417738EC555A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_161:*:*:*:*:*:*",
            "matchCriteriaId": "1A14DC8E-32C7-4BA9-A88E-6D03F8473DDD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_166:*:*:*:*:*:*",
            "matchCriteriaId": "34C9AF5B-F155-4D9C-B4B4-730696A85873"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "273F628E-2889-412C-BC02-82FEEF4CE6AF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_26:*:*:*:*:*:*",
            "matchCriteriaId": "40CC00A2-E57F-49B8-BD9A-A3107258EFF9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "38C33CF8-3FA4-4775-91CF-83B9A4B51B5D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "186C5B76-630C-483E-9C44-27BA00A1365B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "965C32C2-BAD2-415A-B8F3-A5B2A96C077F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "1D7B7908-F110-4937-A16F-E942F7EE94E8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_53:*:*:*:*:*:*",
            "matchCriteriaId": "A7CE4E97-2553-4B54-9B49-2AEFFF1E97DF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_54:*:*:*:*:*:*",
            "matchCriteriaId": "C3BB26FE-A7A4-4C0C-82E0-3B690C08AF4D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_65:*:*:*:*:*:*",
            "matchCriteriaId": "CC0BAF78-22E6-4F90-885D-654A317832C3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_70:*:*:*:*:*:*",
            "matchCriteriaId": "2CEFB387-F28B-4A26-B0BD-A99D88765CF2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_76:*:*:*:*:*:*",
            "matchCriteriaId": "05C5D50F-DD77-4B91-9B98-EA79206E3AEC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "E7A2F23D-A588-4895-91CB-F4726D244E71"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_8:*:*:*:*:*:*",
            "matchCriteriaId": "496C913F-16A4-4710-80EB-0444ED57F981"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_84:*:*:*:*:*:*",
            "matchCriteriaId": "F7B7D466-132A-4584-B6D8-68C05F02E3AE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_89:*:*:*:*:*:*",
            "matchCriteriaId": "B8DDE050-D1E9-4E42-A511-FE85C5482EAD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_90:*:*:*:*:*:*",
            "matchCriteriaId": "2508B0C0-F3F7-4993-A90B-31DBD299C7EB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_92:*:*:*:*:*:*",
            "matchCriteriaId": "EB51FD59-0119-4335-851F-65F108E34885"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_96:*:*:*:*:*:*",
            "matchCriteriaId": "F26A6EE5-5083-42BE-822A-66BB279B68F6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_98:*:*:*:*:*:*",
            "matchCriteriaId": "D3BC31FE-EE44-4919-96F1-A3CD9EB2E6F9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_99:*:*:*:*:*:*",
            "matchCriteriaId": "54AF1EBC-02AE-4303-93E9-ACE2C15831B3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:-:*:*:*:*:*:*",
            "matchCriteriaId": "9A4DD35F-132E-4CB4-846C-8C0A0DAE11A3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "28B96884-0ED3-4B3F-9FF2-D9826C6A11C8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "498B5193-9227-408B-BB96-93D47FE6C136"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "5F5BF964-A06C-46B4-BBAF-B992F2BFE5BA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "D6BC96F7-EA95-4126-AF11-CA51E710B8B5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_12:*:*:*:*:*:*",
            "matchCriteriaId": "25CBBD3E-F6BC-44A8-ADF8-A2A683C4FD90"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "09AFB3C5-3E13-4079-B732-9994FB108B80"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "4BB9DABC-4207-4BE4-80B9-5431BE8924CC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "A593B6C5-F968-4C08-9CEC-0D04CBCFCBAE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_18:*:*:*:*:*:*",
            "matchCriteriaId": "B08AEDE4-10E7-49B1-A7E3-343C16651E0C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "F52CCFD6-8E42-4704-BCDB-8D4743AD8878"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_25:*:*:*:*:*:*",
            "matchCriteriaId": "D1A5BD3C-6C81-4948-BD6E-351AE54E051B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_33:*:*:*:*:*:*",
            "matchCriteriaId": "92E9C407-AAF6-4FE8-ABF8-28E78090C2F5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_34:*:*:*:*:*:*",
            "matchCriteriaId": "17892B1E-CFC8-4A21-A654-0C67AE1CEA02"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "782C1482-BF59-4663-A17F-A10247715223"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_39:*:*:*:*:*:*",
            "matchCriteriaId": "ECB15DB7-ACF9-4D7E-8BAC-C65634E7C813"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "D5E45EF8-9B5E-4AAB-8952-9358AC1625D4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "BAA7ADEB-B8BF-41C3-B8F9-44B3F617A8B6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "539F141A-9129-418A-8C86-8DF565A0106B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_60:*:*:*:*:*:*",
            "matchCriteriaId": "2F1C55C8-9EFD-4B74-A1B9-83E1B8B4B306"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_73:*:*:*:*:*:*",
            "matchCriteriaId": "BC2BB169-1FE9-4DD9-95DD-C2875068B976"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_91:*:*:*:*:*:*",
            "matchCriteriaId": "7924252E-97BB-4ADE-81CA-4EB974B6FD51"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "4005C231-9EA2-40A5-A2F0-5A94EA498E96"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "395F93BF-DAC3-4213-AA34-D708570B5B9F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "CF84D1C9-E656-4CBF-85DB-3AE434DF87F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "43F8A4D6-ECED-4155-A41C-48B1506D32B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_40:*:*:*:*:*:*",
            "matchCriteriaId": "5ABBDE5D-BD23-45CE-BDA8-3168C53803B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "5D89F1B2-43E0-486D-AEC6-0D1B35C4B8A4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_6:*:*:*:*:*:*",
            "matchCriteriaId": "05B0445D-E33E-4F3F-B21C-B6988C8F0BBB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "10FE3305-F601-4757-9080-E7F41B2974AA"
          }
        ]
      }
    ]
  }
]

04CVE-2026-104286

Fortinet · FortiMail

Ahora · Prioridad 85/100

Fortinet FortiMail Path Traversal Vulnerability

  • en CISA KEV (explotación confirmada) hace 14 días
  • EPSS en percentil ≥ 80
  • CVSS crítico ≥ 9

CVSS 9.8EPSS 2.20%Percentil 82.2%

KEV: 2026-10-01 · Ransomware: desconocido · Plazo CISA: 2026-10-04

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.2.0",
            "versionEndIncluding": "7.4.8",
            "matchCriteriaId": "77C9CE10-1038-4100-81E0-234822E6373B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.6.0",
            "versionEndIncluding": "7.6.6",
            "matchCriteriaId": "1EA73418-A7A1-4247-BA3E-969550962E0E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "8.0.0",
            "versionEndIncluding": "8.0.1",
            "matchCriteriaId": "DDAF1B20-36CA-4DD4-9483-6B605001B9DA"
          }
        ]
      }
    ]
  }
]

05CVE-2026-59310

Broadcom · VMware vCenter

Ahora · Prioridad 85/100

Broadcom VMware vCenter Path Traversal Vulnerability

  • en CISA KEV (explotación confirmada) hace 58 días
  • ligada a ransomware
  • EPSS en percentil ≥ 80

CVSS sin puntuarEPSS 2.56%Percentil 84.8%

KEV: 2026-08-18 · Ransomware: reportado · Plazo CISA: 2026-08-21

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

06CVE-2026-63077

JetBrains · TeamCity

Ahora · Prioridad 85/100

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

  • en CISA KEV (explotación confirmada) hace 71 días
  • ligada a ransomware
  • EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 89.57%Percentil 99.8%

KEV: 2026-08-05 · Ransomware: reportado · Plazo CISA: 2026-08-08

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

07CVE-2026-87902

WordPress · Core

Ahora · Prioridad 85/100

WordPress Core Remote File Inclusion Vulnerability

  • en CISA KEV (explotación confirmada) hace 20 días
  • EPSS en percentil ≥ 95

CVSS 8.1EPSS 39.98%Percentil 98.6%

KEV: 2026-09-25 · Ransomware: desconocido · Plazo CISA: 2026-09-28

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "4.7.37",
            "matchCriteriaId": "F1CFA516-E292-436E-9B45-BD6ACB344205"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "4.8",
            "versionEndExcluding": "4.8.32",
            "matchCriteriaId": "8EEBFAB5-8903-4D4E-9847-A50A3F840878"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "4.9",
            "versionEndExcluding": "4.9.33",
            "matchCriteriaId": "5A7719CA-2099-45E9-8E48-64EF672C76C0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.0",
            "versionEndExcluding": "5.0.29",
            "matchCriteriaId": "BFA3645E-7056-449B-9DEB-D9D53EB21488"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.1",
            "versionEndExcluding": "5.1.26",
            "matchCriteriaId": "3582671F-7248-420A-8DF7-F32742D0D2AF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.2",
            "versionEndExcluding": "5.2.28",
            "matchCriteriaId": "FD9C147A-9FCB-46A7-8409-4AE652986FDC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.3",
            "versionEndExcluding": "5.3.25",
            "matchCriteriaId": "73C13CF0-B293-47C4-93AA-F46E0323A9C1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.4",
            "versionEndExcluding": "5.4.23",
            "matchCriteriaId": "7FB5AE52-9590-4B1D-BDFF-A522EFDD55DC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.5",
            "versionEndExcluding": "5.5.22",
            "matchCriteriaId": "72A42175-5759-47B1-8E87-ADAF0CDB73C7"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.6",
            "versionEndExcluding": "5.6.21",
            "matchCriteriaId": "5D7C48F3-BBB2-4943-A6F2-E652997034FE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.7",
            "versionEndExcluding": "5.7.19",
            "matchCriteriaId": "D23FACBB-B9EC-4490-B328-24833FEF6209"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.8",
            "versionEndExcluding": "5.8.17",
            "matchCriteriaId": "47F4A57C-CA16-4E9A-B0C2-EBB5FCCB41B9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.9",
            "versionEndExcluding": "5.9.18",
            "matchCriteriaId": "83CC56B0-F56E-4862-B74E-B106092C73F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.0",
            "versionEndExcluding": "6.0.16",
            "matchCriteriaId": "E3EE7487-2943-4229-8B04-8787FE730FCB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.1",
            "versionEndExcluding": "6.1.14",
            "matchCriteriaId": "E83A61A6-8FBC-4AF6-98E6-0152CA380AA0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.2",
            "versionEndExcluding": "6.2.13",
            "matchCriteriaId": "D97C90F9-83C3-4057-A7E2-61787BC24E05"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.3",
            "versionEndExcluding": "6.3.12",
            "matchCriteriaId": "D7DA40D7-228A-4CFF-8CC8-32321BB1D3C5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.4",
            "versionEndExcluding": "6.4.12",
            "matchCriteriaId": "DDE93788-7DAB-475C-B6AE-753780DE8160"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.5",
            "versionEndExcluding": "6.5.12",
            "matchCriteriaId": "18808A77-C445-4D07-A364-A676F2D7FD63"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.6",
            "versionEndExcluding": "6.6.9",
            "matchCriteriaId": "ADEAA29A-1862-476B-8F21-684D8799589E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.7",
            "versionEndExcluding": "6.7.9",
            "matchCriteriaId": "D3BD738C-4601-43C1-A5BC-E5AFB0189CD9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.8",
            "versionEndExcluding": "6.8.10",
            "matchCriteriaId": "4A6867FC-850F-437B-8532-63A5F747D64F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.9",
            "versionEndExcluding": "6.9.9",
            "matchCriteriaId": "5C21A09B-5001-4F4E-A49D-4F29032AF612"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.0",
            "versionEndExcluding": "7.0.6",
            "matchCriteriaId": "6FC26EAE-8D7D-4BF9-AACE-75C6AB13279F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.1",
            "versionEndExcluding": "7.1.2",
            "matchCriteriaId": "525A2372-93E8-447E-BBB7-F795C08B3E2B"
          }
        ]
      }
    ]
  }
]

08CVE-2015-3306

ProFTPD · ProFTPD

Ahora · Prioridad 84/100

ProFTPD Improper Access Control Vulnerability

  • en CISA KEV (explotación confirmada) hace 7 días
  • EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 99.50%Percentil 99.9%

KEV: 2026-10-08 · Ransomware: desconocido · Plazo CISA: 2026-10-11

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

09CVE-2015-5477

ISC · BIND

Ahora · Prioridad 84/100

ISC BIND Data Processing Errors Vulnerability

  • en CISA KEV (explotación confirmada) hace 7 días
  • EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 99.41%Percentil 99.9%

KEV: 2026-10-08 · Ransomware: desconocido · Plazo CISA: 2026-10-11

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

10CVE-2016-3081

Apache · Struts

Ahora · Prioridad 84/100

Apache Struts Command Injection Vulnerability

  • en CISA KEV (explotación confirmada) hace 7 días
  • EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 96.05%Percentil 99.9%

KEV: 2026-10-08 · Ransomware: desconocido · Plazo CISA: 2026-10-11

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

Incorporaciones a KEV · 12 semanas

Semanas ISO; la última está en curso. Escala desde cero.

Ver tabla de datos semanales
Incorporaciones a KEV por semana ISO
SemanaCVEs añadidos
2026-W313
2026-W326
2026-W333
2026-W349
2026-W3511
2026-W3610
2026-W3714
2026-W387
2026-W3912
2026-W406
2026-W415
2026-W426

CISA KEV · actualizado hace 1 h

Fabricantes más explotados (90 días)

Por CVEs incorporados a KEV; no mide ataques ni cuota de mercado.

  1. Microsoft9
  2. Cisco7
  3. Citrix5
  4. Linux5
  5. JFrog4
  6. Check Point3
  7. Fortinet3
  8. Google3
  9. MikroTik3
  10. N-able3

CISA KEV · actualizado hace 1 h

Explora el catálogo

KEV completo + críticas publicadas en 30 días · 3,257 registros (los 10 primeros están arriba) · Orden: prioridad descendente

Limpiar filtros

2561CVE-2026-85520

MyPresta · Google Merchant Center Feed

Vigilar · Prioridad 24/100

Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.99%Percentil 61.5%

Versiones y rangos reportados
[
  {
    "vendor": "MyPresta",
    "product": "Google Merchant Center Feed",
    "collectionURL": "https://mypresta.eu/modules/social-networks/google-merchant-center-feed.html",
    "versions": [
      {
        "status": "affected",
        "version": "1.9.1",
        "lessThanOrEqual": "2.3.8",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2562CVE-2026-85526

Canonical · LXD

Vigilar · Prioridad 24/100

Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.52%Percentil 42.2%

Versiones y rangos reportados
[
  {
    "vendor": "Canonical",
    "product": "LXD",
    "platforms": [
      "Linux"
    ],
    "packageName": "LXD",
    "repo": "https://github.com/canonical/lxd",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.0",
        "lessThan": "4.0.14",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.0.0",
        "lessThan": "5.0.10",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.21.0",
        "lessThan": "5.21.8",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.0",
        "lessThan": "6.10",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2563CVE-2026-85531

Sipay Electronic Money and Payment Services Inc. · OpenCart Virtual POS Module

Vigilar · Prioridad 24/100

Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.20%Percentil 9.2%

Versiones y rangos reportados
[
  {
    "vendor": "Sipay Electronic Money and Payment Services Inc.",
    "product": "OpenCart Virtual POS Module",
    "versions": [
      {
        "status": "affected",
        "version": "26.8.2",
        "lessThan": "26.9.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2564CVE-2026-85681

Unknown · WP Component

Vigilar · Prioridad 24/100

WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.50%Percentil 40.9%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "WP Component",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "2.2.4"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2565CVE-2026-85724

moquette · moquette

Vigilar · Prioridad 24/100

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when pattern-based ACL rules are configured, AuthorizationsCollector.canDoOperation substitutes client ID and username values directly into

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.6EPSS 0.27%Percentil 17.7%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:moquette:moquette:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "0.18.1",
            "matchCriteriaId": "3C13C0A2-7D78-4742-8861-54D487319A82"
          }
        ]
      }
    ]
  }
]

2566CVE-2026-85734

HKUDS · LightRAG

Vigilar · Prioridad 24/100

LightRAG: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.36%Percentil 27.3%

Versiones y rangos reportados
[
  {
    "vendor": "HKUDS",
    "product": "LightRAG",
    "versions": [
      {
        "version": "< 1.5.5",
        "status": "affected"
      }
    ]
  }
]

2567CVE-2026-85751

Mailu · Mailu

Vigilar · Prioridad 24/100

Mailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.56%Percentil 44.8%

Versiones y rangos reportados
[
  {
    "vendor": "Mailu",
    "product": "Mailu",
    "versions": [
      {
        "version": ">= 2.0.0, < 2024.06.55",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Mailu",
    "product": "helm-charts",
    "versions": [
      {
        "version": "< 2.7.3",
        "status": "affected"
      }
    ]
  }
]

2568CVE-2026-85878

microsoft · azure_horizondb

Vigilar · Prioridad 24/100

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.78%Percentil 54.6%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:microsoft:azure_horizondb:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "006CB0A5-1DBB-4758-B47D-1CF7925D591F"
          }
        ]
      }
    ]
  }
]

2569CVE-2026-85885

microsoft · 365_copilot

Vigilar · Prioridad 24/100

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.72%Percentil 52.6%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:microsoft:365_copilot:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "E4A390D9-7457-430A-82CC-A24DA275BF06"
          }
        ]
      }
    ]
  }
]

2570CVE-2026-85889

microsoft · azure_ai_foundry

Vigilar · Prioridad 24/100

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 10EPSS 0.67%Percentil 50.6%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:microsoft:azure_ai_foundry:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "4A693909-5648-4575-B10E-F06B77153C21"
          }
        ]
      }
    ]
  }
]

2571CVE-2026-85984

cyberlord92 · miniOrange OTP Login, Verification and SMS Notifications

Vigilar · Prioridad 24/100

miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.67%Percentil 50.8%

Versiones y rangos reportados
[
  {
    "vendor": "cyberlord92",
    "product": "miniOrange OTP Login, Verification and SMS Notifications",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "5.5.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2572CVE-2026-86059

Dokploy · dokploy

Vigilar · Prioridad 24/100

Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.6EPSS 0.49%Percentil 40.1%

Versiones y rangos reportados
[
  {
    "vendor": "Dokploy",
    "product": "dokploy",
    "versions": [
      {
        "version": "< 0.29.13",
        "status": "affected"
      }
    ]
  }
]

2573CVE-2026-86102

WatchGuard · WatchGuard AP

Vigilar · Prioridad 24/100

WatchGuard AP Command Injection in Internal Management API Allows Command Execution

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 1.98%Percentil 80.0%

Versiones y rangos reportados
[
  {
    "vendor": "WatchGuard",
    "product": "WatchGuard AP",
    "versions": [
      {
        "status": "affected",
        "version": "1.0",
        "versionType": "semver",
        "lessThan": "3.4.8"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2574CVE-2026-86106

Arista Networks · VeloCloud Edge

Vigilar · Prioridad 24/100

Security Advisory 0179

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.6EPSS 0.36%Percentil 27.4%

Versiones y rangos reportados
[
  {
    "vendor": "Arista Networks",
    "product": "VeloCloud Edge",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "1.0.0.0",
        "lessThan": "5.2.0.0",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "5.2.0.0",
        "lessThan": "5.2.7.0",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "6.1.0.0",
        "lessThan": "6.1.5.0",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "6.4.0.0",
        "lessThan": "6.4.2.0",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "VeloCloud Edge"
    ]
  }
]

2575CVE-2026-86131

watchguard · fireware

Vigilar · Prioridad 24/100

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on t

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.42%Percentil 34.5%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "12.0",
            "versionEndExcluding": "12.5.21",
            "matchCriteriaId": "C618D05C-B8A0-4912-B87E-B67A0686C14D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "12.12",
            "versionEndExcluding": "12.12.3",
            "matchCriteriaId": "684B81A6-0CE5-4424-A38A-FE989C790E7F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "2025.0",
            "versionEndExcluding": "2026.2.3",
            "matchCriteriaId": "9F11812A-FDA8-401D-871B-219DFDADEDC8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "2026.3",
            "versionEndExcluding": "2026.3.2",
            "matchCriteriaId": "525833A2-ABEC-4C06-BE1B-6A5E64A21775"
          }
        ]
      }
    ]
  }
]

2576CVE-2026-86246

apache · tomcat_native

Vigilar · Prioridad 24/100

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.36%Percentil 27.9%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:apache:tomcat_native:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "1.3.0",
            "versionEndExcluding": "1.3.9",
            "matchCriteriaId": "F73CA9D6-BD48-4223-B2AC-6F345E0895C6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:apache:tomcat_native:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "2.0.0",
            "versionEndExcluding": "2.0.16",
            "matchCriteriaId": "AC3D1E2E-A1EE-4F33-8D7F-11D37A8AAE66"
          }
        ]
      }
    ]
  }
]

2577CVE-2026-86248

Apache Software Foundation · Apache Tomcat

Vigilar · Prioridad 24/100

Apache Tomcat: Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.39%Percentil 30.7%

Versiones y rangos reportados
[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Tomcat",
    "versions": [
      {
        "status": "affected",
        "version": "11.0.0-M14",
        "lessThanOrEqual": "11.0.25",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.1.22",
        "lessThanOrEqual": "10.1.59",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.0.92",
        "lessThanOrEqual": "9.0.121",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2578CVE-2026-86325

Moxa · MGate MB3170 Series

Vigilar · Prioridad 24/100

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the `account_name` parameter whe

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.4EPSS 0.34%Percentil 25.4%

Versiones y rangos reportados
[
  {
    "vendor": "Moxa",
    "product": "MGate MB3170 Series",
    "versions": [
      {
        "status": "affected",
        "version": "1.0",
        "lessThanOrEqual": "4.7",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Moxa",
    "product": "MGate MB3270 Series",
    "versions": [
      {
        "status": "affected",
        "version": "1.0",
        "lessThanOrEqual": "4.7",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2579CVE-2026-86345

Red Hat · Red Hat Directory Server 11

Vigilar · Prioridad 24/100

389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9EPSS 0.38%Percentil 30.2%

Versiones y rangos reportados
[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Directory Server 11",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "389-ds-base",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:directory_server:11"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Directory Server 11",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "redhat-ds:11/389-ds-base",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:directory_server:11"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Directory Server 12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "389-ds-base",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:directory_server:12"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Directory Server 12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "redhat-ds:12/389-ds-base",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:directory_server:12"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Directory Server 13",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "389-ds-base",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:directory_server:13"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "389-ds-base",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "389-ds-base",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "389-ds-base",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "389-ds:1.4/389-ds-base",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "389-ds-base",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "389-ds-base",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  }
]

2580CVE-2026-86350

Apache Software Foundation · Apache Tomcat

Vigilar · Prioridad 24/100

Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.31%Percentil 22.3%

Versiones y rangos reportados
[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Tomcat",
    "versions": [
      {
        "status": "affected",
        "version": "11.0.22",
        "lessThanOrEqual": "11.0.25",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.1.55",
        "lessThanOrEqual": "10.1.59",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.0.118",
        "lessThanOrEqual": "9.0.121",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2581CVE-2026-86360

Dell · System Update

Vigilar · Prioridad 24/100

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.6EPSS 0.63%Percentil 48.8%

Versiones y rangos reportados
[
  {
    "vendor": "Dell",
    "product": "System Update",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.3.0.0 or later",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2582CVE-2026-86405

Sipay Electronic Money and Payment Services Inc. · PrestaShop Virtual POS Module

Vigilar · Prioridad 24/100

Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.20%Percentil 9.2%

Versiones y rangos reportados
[
  {
    "vendor": "Sipay Electronic Money and Payment Services Inc.",
    "product": "PrestaShop Virtual POS Module",
    "versions": [
      {
        "status": "affected",
        "version": "26.8.1",
        "lessThan": "26.9.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2583CVE-2026-86460

Apache Software Foundation · Apache Syncope

Vigilar · Prioridad 24/100

Apache Syncope: Cypher Injection via FIQL Search on Neo4j Persistence

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.60%Percentil 47.1%

Versiones y rangos reportados
[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Syncope",
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "packageName": "org.apache.syncope.core:syncope-core-persistence-neo4j",
    "packageURL": "pkg:maven/org.apache.syncope.core/syncope-core-persistence-neo4j",
    "versions": [
      {
        "status": "affected",
        "version": "3.0.0-M0",
        "lessThanOrEqual": "3.0.16",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.0.0-M0",
        "lessThanOrEqual": "4.0.7",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.1.0-M0",
        "lessThanOrEqual": "4.1.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2584CVE-2026-86462

apache · apache-airflow-providers-fab

Vigilar · Prioridad 24/100

Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate that user's existing database-backed sessions. An attacker who already holds a co

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.83%Percentil 56.3%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:apache:apache-airflow-providers-fab:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "3.2.0",
            "versionEndExcluding": "3.9.0",
            "matchCriteriaId": "694445E4-472C-48B7-8B7D-4E6A31F2E1BF"
          }
        ]
      }
    ]
  }
]

2585CVE-2026-86473

apache · airflow

Vigilar · Prioridad 24/100

Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out presenting its credential as an Authorization bearer header instead, th

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.75%Percentil 53.6%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "3.0.0",
            "versionEndExcluding": "3.3.2",
            "matchCriteriaId": "5ED0276F-9088-406F-9E2A-13720DF61185"
          }
        ]
      }
    ]
  }
]

2586CVE-2026-86533

team-alembic · ash_authentication

Vigilar · Prioridad 24/100

Revoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication Phoenix

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.91%Percentil 58.8%

Versiones y rangos reportados
[
  {
    "collectionURL": "https://repo.hex.pm",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.AshAuthentication.Plug.Helpers'"
    ],
    "packageName": "ash_authentication",
    "packageURL": "pkg:hex/ash_authentication",
    "product": "ash_authentication",
    "programFiles": [
      "lib/ash_authentication/plug/helpers.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.AshAuthentication.Plug.Helpers':retrieve_from_session/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Plug.Helpers':authenticate_resource_from_session/4"
      }
    ],
    "repo": "https://github.com/team-alembic/ash_authentication",
    "vendor": "team-alembic",
    "versions": [
      {
        "lessThan": "4.15.0",
        "status": "affected",
        "version": "4.9.1",
        "versionType": "semver"
      },
      {
        "lessThan": "5.0.0-rc.14",
        "status": "affected",
        "version": "5.0.0-rc.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.AshAuthentication.Plug.Helpers'"
    ],
    "packageName": "team-alembic/ash_authentication",
    "packageURL": "pkg:github/team-alembic/ash_authentication",
    "product": "ash_authentication",
    "programFiles": [
      "lib/ash_authentication/plug/helpers.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.AshAuthentication.Plug.Helpers':retrieve_from_session/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Plug.Helpers':authenticate_resource_from_session/4"
      }
    ],
    "repo": "https://github.com/team-alembic/ash_authentication",
    "vendor": "team-alembic",
    "versions": [
      {
        "changes": [
          {
            "at": "a3f49f758f013d2ff086dd9c5ef2d94e921711b4",
            "status": "unaffected"
          },
          {
            "at": "e28e911caa9728d76329afdb0fb26742ffe4eeef",
            "status": "unaffected"
          }
        ],
        "lessThan": "*",
        "status": "affected",
        "version": "fcaeb73f76f8f2e9aef8bf637690d2a20dd97596",
        "versionType": "git"
      }
    ]
  },
  {
    "collectionURL": "https://repo.hex.pm",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication_phoenix:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.AshAuthentication.Phoenix.LiveSession'"
    ],
    "packageName": "ash_authentication_phoenix",
    "packageURL": "pkg:hex/ash_authentication_phoenix",
    "product": "ash_authentication_phoenix",
    "programFiles": [
      "lib/ash_authentication_phoenix/live_session.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.AshAuthentication.Phoenix.LiveSession':on_mount/4"
      }
    ],
    "repo": "https://github.com/team-alembic/ash_authentication_phoenix",
    "vendor": "team-alembic",
    "versions": [
      {
        "lessThan": "2.17.4",
        "status": "affected",
        "version": "2.10.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.0.0-rc.11",
        "status": "affected",
        "version": "3.0.0-rc.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication_phoenix:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.AshAuthentication.Phoenix.LiveSession'"
    ],
    "packageName": "team-alembic/ash_authentication_phoenix",
    "packageURL": "pkg:github/team-alembic/ash_authentication_phoenix",
    "product": "ash_authentication_phoenix",
    "programFiles": [
      "lib/ash_authentication_phoenix/live_session.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.AshAuthentication.Phoenix.LiveSession':on_mount/4"
      }
    ],
    "repo": "https://github.com/team-alembic/ash_authentication_phoenix",
    "vendor": "team-alembic",
    "versions": [
      {
        "changes": [
          {
            "at": "f7ab005a2aac09707a25521653c94893d328cc52",
            "status": "unaffected"
          },
          {
            "at": "0135217e34e621dac79ae3d9559aeee49304b0aa",
            "status": "unaffected"
          }
        ],
        "lessThan": "*",
        "status": "affected",
        "version": "a3253fb4fc7145aeb403537af1c24d3a8d51ffb1",
        "versionType": "git"
      },
      {
        "changes": [
          {
            "at": "f7ab005a2aac09707a25521653c94893d328cc52",
            "status": "unaffected"
          },
          {
            "at": "0135217e34e621dac79ae3d9559aeee49304b0aa",
            "status": "unaffected"
          }
        ],
        "lessThan": "*",
        "status": "affected",
        "version": "0135217e34e621dac79ae3d9559aeee49304b0aa",
        "versionType": "git"
      }
    ]
  }
]

2587CVE-2026-86591

Unknown · Botiga Pro

Vigilar · Prioridad 24/100

Botiga Pro < 1.6.5 - Unauthenticated Arbitrary Blog Options Update via Templates Builder REST Route

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.54%Percentil 43.9%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "Botiga Pro",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "1.6.5"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2588CVE-2026-86706

Unknown · Quick quotes

Vigilar · Prioridad 24/100

Quick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.15%Percentil 3.4%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "Quick quotes",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2589CVE-2026-86707

Unknown · Private Feed Key

Vigilar · Prioridad 24/100

Private Feed Key <= 0.1 - Unauthenticated Authentication Bypass via 'feedkey' Parameter

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.50%Percentil 40.9%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "Private Feed Key",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "0.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2590CVE-2026-86708

Zohocorp · ManageEngine Applications Manager

Vigilar · Prioridad 24/100

Sensitive data exposure

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 10EPSS 1.24%Percentil 68.4%

Versiones y rangos reportados
[
  {
    "vendor": "Zohocorp",
    "product": "ManageEngine Applications Manager",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "182300",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2591CVE-2026-86709

Unknown · The Pressengine

Vigilar · Prioridad 24/100

The Pressengine <= 1.0 - Unauthenticated Authentication Bypass

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.63%Percentil 48.5%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "The Pressengine",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2592CVE-2026-86710

Unknown · Login with QR

Vigilar · Prioridad 24/100

Login with QR <= 1.0.0 - Unauthenticated Authentication Bypass via 'autologin_code' Parameter

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.50%Percentil 40.9%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "Login with QR",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2593CVE-2026-86717

Unknown · Insurify

Vigilar · Prioridad 24/100

Insurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popup

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.15%Percentil 3.4%

Versiones y rangos reportados
[
  {
    "vendor": "Unknown",
    "product": "Insurify",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

2594CVE-2026-86860

ServiceNow · ServiceNow AI Platform

Vigilar · Prioridad 24/100

Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.30%Percentil 20.8%

Versiones y rangos reportados
[
  {
    "vendor": "ServiceNow",
    "product": "ServiceNow AI Platform",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Yokohama Patch 13 Hot Fix 5a",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Zurich Patch 10 Hot Fix 3b",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Zurich Patch 10 Hot Fix 4a W32",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Zurich Patch 11 Hot Fix 3",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Australia Patch 2 Hot Fix 4b W32",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Australia Patch 4 Hot Fix 3",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Australia Patch 5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2595CVE-2026-86863

pgadmin · pgadmin_4

Vigilar · Prioridad 24/100

pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse proxy in front of pgAdmin, delivered through the WSGI/CGI environment. WebserverAuth

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.58%Percentil 46.3%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*",
            "versionStartIncluding": "6.2",
            "versionEndExcluding": "9.18",
            "matchCriteriaId": "A07D8026-37E6-44DB-B0F0-10DCCC1B9756"
          }
        ]
      }
    ]
  }
]

2596CVE-2026-86881

apple · ipados

Vigilar · Prioridad 24/100

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macO

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.40%Percentil 32.0%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "26.7",
            "matchCriteriaId": "0896A319-539F-45D2-ACA1-7225AE5C06ED"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "26.7",
            "matchCriteriaId": "B331E4FC-727F-403B-8689-E647A51204FD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "15.0",
            "versionEndExcluding": "15.8",
            "matchCriteriaId": "241A56D1-1E33-4317-A053-85AF8E3770B3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "26.0",
            "versionEndExcluding": "26.7",
            "matchCriteriaId": "1BE83000-26C0-49C5-A966-BB40AD6F8BEE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "6BD26C5D-C2F6-4BB6-A1E6-1F5723EA7458"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "6F43E9DC-5D72-4325-9965-E6B50054B8E8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "27.0",
            "matchCriteriaId": "52C964A6-6BF4-4C0A-9C20-FBDE815AE5DF"
          }
        ]
      }
    ]
  }
]

2597CVE-2026-86930

claris · filemaker_server

Vigilar · Prioridad 24/100

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generati

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.29%Percentil 19.9%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:claris:filemaker_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "26.0.3",
            "matchCriteriaId": "E5C76BCB-BC4B-4592-8963-B51A7A5C211B"
          }
        ]
      }
    ]
  }
]

2598CVE-2026-86934

claris · filemaker_server

Vigilar · Prioridad 24/100

An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom Web Publishing with XML setti

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.32%Percentil 22.6%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:claris:filemaker_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "26.0.3",
            "matchCriteriaId": "E5C76BCB-BC4B-4592-8963-B51A7A5C211B"
          }
        ]
      }
    ]
  }
]

2599CVE-2026-87078

Unknown · Unknown

Vigilar · Prioridad 24/100

Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.65%Percentil 49.9%

Versiones y rangos reportados
[
  {
    "collectionURL": "https://cpan.org/modules",
    "defaultStatus": "unaffected",
    "modules": [
      "Net::IDN::Punycode"
    ],
    "packageName": "Net-IDN-Encode",
    "packageURL": "pkg:cpan/Net-IDN-Encode",
    "programFiles": [
      "lib/Net/IDN/Punycode.xs"
    ],
    "programRoutines": [
      {
        "name": "Net::IDN::Punycode::decode_punycode"
      }
    ],
    "repo": "https://github.com/robrwo/Net-IDN-Encode",
    "versions": [
      {
        "lessThan": "2.590",
        "status": "affected",
        "version": "2.302",
        "versionType": "custom"
      }
    ]
  }
]

2600CVE-2026-87080

Unknown · Unknown

Vigilar · Prioridad 24/100

Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.63%Percentil 48.8%

Versiones y rangos reportados
[
  {
    "collectionURL": "https://cpan.org/modules",
    "defaultStatus": "unaffected",
    "modules": [
      "Net::IDN::Punycode::PP"
    ],
    "packageName": "Net-IDN-Encode",
    "packageURL": "pkg:cpan/Net-IDN-Encode",
    "programFiles": [
      "lib/Net/IDN/Punycode/PP.pm"
    ],
    "programRoutines": [
      {
        "name": "Net::IDN::Punycode::PP::decode_punycode"
      }
    ],
    "repo": "https://github.com/robrwo/Net-IDN-Encode",
    "versions": [
      {
        "lessThan": "2.590",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

2601CVE-2026-87115

e4jvikwp · VikAppointments Services Booking Calendar

Vigilar · Prioridad 24/100

VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.88%Percentil 58.0%

Versiones y rangos reportados
[
  {
    "vendor": "e4jvikwp",
    "product": "VikAppointments Services Booking Calendar",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.2.21",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2602CVE-2026-87121

lwIP · TCP/IP Stack MQTT

Vigilar · Prioridad 24/100

Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.53%Percentil 43.0%

Versiones y rangos reportados
[
  {
    "vendor": "lwIP",
    "product": "TCP/IP Stack MQTT",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.1",
        "lessThanOrEqual": "2.2.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2603CVE-2026-87128

oracle · hyperion_data_relationship_management

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploit

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.43%Percentil 34.9%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_data_relationship_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "61A79E17-124B-443C-BD8A-9B066A5FE520"
          }
        ]
      }
    ]
  }
]

2604CVE-2026-87129

oracle · hyperion_data_relationship_management

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploit

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.43%Percentil 34.9%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_data_relationship_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "61A79E17-124B-443C-BD8A-9B066A5FE520"
          }
        ]
      }
    ]
  }
]

2605CVE-2026-87170

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.43%Percentil 34.9%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]

2606CVE-2026-87172

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.43%Percentil 35.6%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]

2607CVE-2026-87173

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.43%Percentil 34.9%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]

2608CVE-2026-87175

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.43%Percentil 34.9%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]

2609CVE-2026-87176

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.43%Percentil 34.9%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]

2610CVE-2026-87184

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.59%Percentil 46.8%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]
Cómo calculamos la prioridad

La señal principal es qué tan reciente es la explotación confirmada. Ahora: entró a CISA KEV hace ≤ 30 días, o hace ≤ 90 días y está ligada a ransomware o tiene percentil EPSS ≥ 95. Esta semana: KEV del último año; KEV de cualquier edad con ransomware y percentil EPSS ≥ 95; o CVSS ≥ 9 con percentil EPSS ≥ 80 aunque no esté en KEV. Vigilar: KEV más antiguos sin esas señales y críticas sin evidencia de explotación. Baja: resto. Bases 70 / 45 / 20 / 0; sumamos ransomware +8, percentil ≥ 95 +5 o ≥ 80 +3, CVSS ≥ 9 +4 o ≥ 7 +2 y hasta +10 por recencia en KEV; las bandas no se traslapan (máximo 97 / 75 / 44 / 19). Los plazos CISA vencidos no suben la prioridad: obligan a agencias federales de EE. UU., no a todos; un plazo en los próximos 14 días sí se muestra como razón. No es una probabilidad ni una evaluación de tu entorno. Los datos faltantes limitan la confianza; no equivalen a riesgo cero.