Inteligencia pública · Sin registro

Qué se explota. Qué atender primero.

Prioriza con evidencia de explotación, probabilidad e impacto. No es un inventario completo ni confirma que tu equipo esté afectado: verifica producto y versión.

Explotándose (CISA KEV)

1,745

CVEs con explotación observada

CISA KEV · actualizado hace 2 h

Incorporaciones a KEV

esta semana / +35 en 30 días

CISA KEV · actualizado hace 2 h

Ligadas a ransomware

361

CISA KEV · actualizado hace 2 h

Críticas nuevas (7 días)

431

10 con EPSS alto de 353 con EPSS publicado

NVD · actualizado hace 1 h

CVE.org · actualizado hace 1 h

FIRST EPSS · actualizado hace 2 h

Semana = últimos 7 días UTC, incluido hoy. KEV registra explotación observada, no ataques en curso ni su cantidad. EPSS estima probabilidad a 30 días; alto = percentil ≥ 80. Corte: 15/10/2026, 2:33:04 a.m. UTC.

Prioriza ahora

Hasta 10 CVEs de mayor prioridad para los filtros elegidos. Confirma exposición y aplica mitigaciones o parches del fabricante.

01CVE-2026-104935

Ivanti · Connect Secure

Ahora · Prioridad 87/100

NVD: CVE-2026-104935 CVE.org: CVE-2026-104935

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

en CISA KEV (explotación confirmada) hace 2 días
EPSS en percentil ≥ 95
plazo CISA en 1 día

CVSS 8.6EPSS 25.98%Percentil 98.0%

KEV: 2026-10-13 · Ransomware: desconocido · Plazo CISA: 2026-10-16

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "25.1.0.0",
            "versionEndExcluding": "25.1.1.2",
            "matchCriteriaId": "51F9201D-EF2F-4750-846E-912827761A9F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "25.1.2.0",
            "versionEndExcluding": "25.1.3.0",
            "matchCriteriaId": "822E7CEB-9AB2-4B0E-B87A-B9718503466A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2:*:*:*:*:*:*",
            "matchCriteriaId": "56FEC223-8FF7-4A05-9577-CFFE0AA6526C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.1:*:*:*:*:*:*",
            "matchCriteriaId": "5569D323-6ADF-4B16-822D-FBA6760356C3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.2:*:*:*:*:*:*",
            "matchCriteriaId": "FF4D400F-49DA-4C5F-8F63-5A15738360AE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.3:*:*:*:*:*:*",
            "matchCriteriaId": "9CA7EF35-D0BC-4714-A38A-91660BE1BA55"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.4:*:*:*:*:*:*",
            "matchCriteriaId": "F22EC396-A447-4175-8A30-C8DC10ACFFE9"
          }
        ]
      }
    ]
  }
]

02CVE-2026-76460

Cisco · Identity Services Engine

Ahora · Prioridad 86/100

NVD: CVE-2026-76460 CVE.org: CVE-2026-76460 ¿Tu versión está afectada?

Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

en CISA KEV (explotación confirmada) hace 29 días
EPSS en percentil ≥ 95
CVSS crítico ≥ 9

CVSS 10EPSS 14.03%Percentil 96.5%

KEV: 2026-09-16 · Ransomware: desconocido · Plazo CISA: 2026-09-19

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "7A789B44-7E6C-4FE9-BD40-702A871AB8AC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "93920663-445E-4456-A905-81CEC6CA1833"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "DF9CCBFA-0004-48F7-B142-6FDD4B3E1081"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "C91717BE-76EF-410C-970D-01C5FDC52A0B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "33DA5BB8-4CFE-44BD-9CEB-BC26577E8477"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "D3AEFA85-66B5-4145-A4AD-96D1FF86B46D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "7A6A0697-6A9E-48EF-82D8-36C75E0CDFDC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "E939B65A-7912-4C36-8799-03A1526D7BD3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "833B438F-0869-4C0D-9952-750C00702E8D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "E8B2588D-01F9-450B-B2E3-ADC4125E354E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "E41016C0-19E6-4BCC-A8DD-F6C9A2B0003E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "654E946A-07C5-4036-BC54-85EF42B808DD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "7932D5D5-83E1-4BEF-845A-D0783D4BB750"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "1B818846-4A6E-4256-B344-281E8C786C43"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "1EEC9040-9BD3-43D0-A33E-1EBD941EB65F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "A44858A2-922A-425A-8B38-0C47DB911A3C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "53484A32-757B-42F8-B655-554C34222060"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "0CCAC61F-C273-49B3-A631-31D3AE3EB148"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "B452B4F0-8510-475E-9AE8-B48FABB4D7D3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "5733512D-12B5-4098-AF90-9D68217FAC27"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "4ED98020-7BAF-4E5E-8B7B-22537200C283"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "4C6839DC-F3A2-4133-BF60-2E678E6DD4A4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "43F3A55D-D4FC-4D93-9513-94B64B21A2B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "F0F60A00-E952-400A-B553-BE96E7FF746F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "FF8B81A6-BF44-4E5F-B167-39F61DDCA026"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "56E0F0EC-3E66-4866-89F5-89B331F3F517"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "2E3E8937-2859-4A2A-91C0-05F674EF0466"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "D4B14684-EB9E-405B-85FA-B62E57CB292C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "22B752D1-9E8F-4FB7-8EEB-F9234492372B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "85A1CC7D-FE54-4AC0-B98F-972C4B1F3189"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "D23905E0-E525-49B1-8E5F-4EB42D186768"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "74509498-38EF-4345-9583-CEF5C26CA1D8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "CD05FF93-7B8C-4283-9DB7-E03FE98FAADF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "0F9B6A8E-E773-44A3-9266-878F0C58EB41"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "D3727619-E0CA-4CA9-BE35-0C732BCF1741"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "2CFB7565-3930-409C-B5DB-CE77E6ED7C42"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "A388D916-D6A1-4D3A-A48A-A150F387B755"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "2610FD35-BC4B-41B7-9C92-E6E5264FEE54"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "3FEE4377-B238-4442-9892-28CECFB2319E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "6598563B-7E32-43FB-96A7-88C53E4CE226"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "719C8E82-269D-4F21-B2B4-4CD3033A17F9"
          }
        ]
      }
    ]
  },
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "006E0D77-534C-447F-8E97-EC0AB906D978"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "AC07A742-D194-425C-945C-3977E96B61B8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "00D4B446-EDCE-41DC-A03B-97D8A371B0D9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "BE3B2985-AC34-4628-8564-517C48B9F475"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "97787372-9A0D-4916-A7A2-19237B84419F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "2E2D9D7C-A36E-489D-A2E1-ACE9E9C399BD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "3ABA57DA-78C9-489B-88E5-6E5275E53388"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "2ABFB0CE-60CF-4969-A91E-186F457C8014"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "B8CF7EF0-FBAA-47C7-8386-F67264CA8D0E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "5F08ACD7-2867-428A-966C-6509283FCA10"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "B365970F-9239-45F8-80C6-DA426FCA2E32"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "5A66142F-712F-4EFA-9FC4-E499D3015DD2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "50D8B7DD-14A8-4C67-8B32-E1F9C7D9C01E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "CB65DFF8-33D8-4840-8A63-7C4797FF0B51"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "9CAAF565-E1CF-4002-B91C-290ECAB2F16A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "890FDA62-DED9-401B-9D44-26F3624118CD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "604079BA-78F5-4D20-AF27-E7A9A899DA0C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "25344C6F-8EB6-4709-A51B-DCA26AA885E3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "51DE5AD0-5DFA-460D-B22D-0F5E367A9A28"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "683F2E87-9759-4A98-B7C9-489E74837D59"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "22BF8687-84E4-4609-8100-FD2408DF3247"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "19F88640-BC3E-42D2-ADDC-59114974103C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "40A94055-EF01-4799-813D-7BFFDD13C685"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "3CA3315D-8A45-43F4-A0F0-094D325F285B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "B3736136-9FD8-4B12-B119-EA15201224D9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "FB15AE6D-F4EF-40AD-A88E-D22612AEF2A4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "25B8E5EB-393A-40E8-9A0D-465ECCC2A4B8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "654ED77E-22D3-4E76-9E6D-B1581F5982F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "A0648EE9-F042-479F-9AAB-C6B5DBC46511"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "83F3BA58-4F38-41C8-956F-38A2F44EECE4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "6C30FA1D-91E2-48C5-B181-A88FDF668278"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "768215B1-80B7-40FF-8772-BA4C0B3913F5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "40239DA8-43B6-466B-85B0-6D644D7027D1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "9118B7ED-E678-47C3-9D17-F522D9362B2F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "C2ED3257-CB9D-4FD5-A482-3648CF292128"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "CC0525FD-C4D7-4B48-BF35-1791391AB148"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "68C96F6B-51EE-4D03-9598-CBFD16DA22EF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "62F25185-D19E-4EC5-8A68-7AB669B76E90"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "C457D2EC-FB63-49B7-A90E-CE67ED763BAE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "6566330F-A048-44A1-9821-7A5844C82CEC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "1154F196-2CB3-4AC2-BE00-11A8942EA999"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "7E30ECF6-5B1D-4280-AA02-123153E68F28"
          }
        ]
      }
    ]
  }
]

03CVE-2026-93616

Check Point · Multiple Products

Ahora · Prioridad 86/100

NVD: CVE-2026-93616 CVE.org: CVE-2026-93616

Check Point Multiple Products Path Traversal Vulnerability

en CISA KEV (explotación confirmada) hace 23 días
EPSS en percentil ≥ 95
CVSS crítico ≥ 9

CVSS 9.8EPSS 19.65%Percentil 97.4%

KEV: 2026-09-22 · Ransomware: desconocido · Plazo CISA: 2026-09-25

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "r80",
            "versionEndExcluding": "r81.10",
            "matchCriteriaId": "46543FA9-C054-4F64-B6A9-37191C09C8BC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "A2428B4E-3754-44B5-9C21-AE9F7746A440"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_106:*:*:*:*:*:*",
            "matchCriteriaId": "BA42413E-A16A-4D83-BD08-C44D2272B352"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "B55EFDA0-B970-4EB0-A1B8-FE10E3FF1D39"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_109:*:*:*:*:*:*",
            "matchCriteriaId": "8A5711F6-13C5-4C50-ADE2-8E9465BEABCB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_110:*:*:*:*:*:*",
            "matchCriteriaId": "8F71DADF-125C-458F-81E2-A572527C10C6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "2C1FE1CC-4FA9-420A-8F7A-E180027F1A33"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_128:*:*:*:*:*:*",
            "matchCriteriaId": "C38E5B49-3074-48F3-A623-7C86C27204C6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_129:*:*:*:*:*:*",
            "matchCriteriaId": "CD9E8386-0220-4A94-87FD-D9E663983AFA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_130:*:*:*:*:*:*",
            "matchCriteriaId": "A5ACC58D-34A8-4D04-98C6-8DFF9465DC60"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_131:*:*:*:*:*:*",
            "matchCriteriaId": "78074569-7B81-440B-BEDA-5F1B6002CA57"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_132:*:*:*:*:*:*",
            "matchCriteriaId": "CD9E6258-DF53-4E47-9DE5-109F3E5F5A71"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_135:*:*:*:*:*:*",
            "matchCriteriaId": "BB44CD33-CDC4-4D51-A897-2EF8E108546B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_139:*:*:*:*:*:*",
            "matchCriteriaId": "8DBDF8B8-5A70-427B-91F1-7678D3CC281C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "964C5CDC-D605-4A4F-B1E8-92BE59EDA34A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "B6A031A8-D79B-461C-A613-C9D922709A8C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_150:*:*:*:*:*:*",
            "matchCriteriaId": "4DACDF4E-DDDF-4C32-9E36-8F41370BDBBA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_152:*:*:*:*:*:*",
            "matchCriteriaId": "C25851DF-54C5-40EE-BCFF-3E65EBBB1564"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_156:*:*:*:*:*:*",
            "matchCriteriaId": "B029BBE5-EAEC-4E10-A7FE-45ABB458D85B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "75529BA5-943C-46D6-9C33-18D1EEB8063A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_165:*:*:*:*:*:*",
            "matchCriteriaId": "F08CD952-5857-4C7D-8982-389A9DCC8309"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_169:*:*:*:*:*:*",
            "matchCriteriaId": "75BBDB88-78C3-47E1-848C-B8BAA7B284E0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_170:*:*:*:*:*:*",
            "matchCriteriaId": "AB9581B4-B2FA-4946-9674-391FE35E5B67"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_171:*:*:*:*:*:*",
            "matchCriteriaId": "5E34C44D-5F7A-4260-9B48-D333932F9A61"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_172:*:*:*:*:*:*",
            "matchCriteriaId": "5C9D465A-61AF-4921-B814-9917F7ADE4CA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_173:*:*:*:*:*:*",
            "matchCriteriaId": "4B3D629E-119E-46DE-ACF0-F939E0E44B32"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_174:*:*:*:*:*:*",
            "matchCriteriaId": "F55AD3DF-EE8A-421D-B430-77ABC7670AB4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_177:*:*:*:*:*:*",
            "matchCriteriaId": "AB895616-A0B0-4CF8-A915-AEFBFADECF75"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_181:*:*:*:*:*:*",
            "matchCriteriaId": "11BD9477-949D-436C-A724-7C0DD5755C1A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_183:*:*:*:*:*:*",
            "matchCriteriaId": "20A8D3F6-45C7-4985-8EF2-399274E6466A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_187:*:*:*:*:*:*",
            "matchCriteriaId": "043058AE-6D16-494F-8489-B9F87F0CBDD9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_190:*:*:*:*:*:*",
            "matchCriteriaId": "CFC597DF-66DC-46E7-A31A-82D253A70E7F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_22:*:*:*:*:*:*",
            "matchCriteriaId": "8793BA9A-096E-4E58-A73C-E60C6E010019"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_30:*:*:*:*:*:*",
            "matchCriteriaId": "993ECDA4-9028-46DB-853E-AF07153A6F94"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "7A4F9499-F5B5-4CA3-BED3-F2909AEB7F7C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "4809F58C-906A-4DFB-8520-EC92A4A6FE43"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "3EDB5D74-5C06-472B-A442-D9940B7885D0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_55:*:*:*:*:*:*",
            "matchCriteriaId": "CEB4451F-3296-49E8-B171-BD06167C16D0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_61:*:*:*:*:*:*",
            "matchCriteriaId": "FA3DEADA-8C44-4F7D-BE4D-004C3B97950C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_66:*:*:*:*:*:*",
            "matchCriteriaId": "FFFA1CC6-612A-4701-BFE1-B7AC97B2921F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_75:*:*:*:*:*:*",
            "matchCriteriaId": "1778DF16-6C1E-4228-ACF8-EC94EF0BC884"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_78:*:*:*:*:*:*",
            "matchCriteriaId": "EABB856E-E059-493F-B359-ED9FE39E2637"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "AE129711-6F49-4A3E-A0A1-F64A7655E18F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_81:*:*:*:*:*:*",
            "matchCriteriaId": "EAC196AC-EF63-43F9-BE27-11807E4200DC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_82:*:*:*:*:*:*",
            "matchCriteriaId": "527ED156-030A-4785-811A-9A1D226B9F76"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_85:*:*:*:*:*:*",
            "matchCriteriaId": "C99694F6-A7D0-47A4-BC54-938BC81F7D54"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_87:*:*:*:*:*:*",
            "matchCriteriaId": "4410B9E8-BB15-4A3C-98E2-CF6E259FF74E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_9:*:*:*:*:*:*",
            "matchCriteriaId": "68864C91-5D68-46A3-A671-61EBA3D86762"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_93:*:*:*:*:*:*",
            "matchCriteriaId": "336F50C0-B258-406F-9C56-A20C1ADF9F36"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_94:*:*:*:*:*:*",
            "matchCriteriaId": "5CFFD6BE-1679-4462-A20F-8AF76E3566CD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_95:*:*:*:*:*:*",
            "matchCriteriaId": "FBBBCC15-698D-4B75-8CC6-212870CA29AC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "60E5A48C-4ABB-46DB-BA75-132AFB408BC8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "BD16B955-141C-4F13-A9BC-6CCCD96248B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_101:*:*:*:*:*:*",
            "matchCriteriaId": "F70DA99D-131C-46CC-B582-CB9419DB1B64"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "B06457A0-ED12-4412-BB1D-1D24E0C751EA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_105:*:*:*:*:*:*",
            "matchCriteriaId": "FD7D44D8-C2D1-46C4-B9E4-29664BCFEAB4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_111:*:*:*:*:*:*",
            "matchCriteriaId": "3A7EF92D-B4CC-4868-9026-8F5DA0D14DFC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "4347D905-4E57-4D64-9B57-C406A70DC0C1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_115:*:*:*:*:*:*",
            "matchCriteriaId": "12E1E158-790D-40D4-81FF-622307C4524E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "01DA6EEA-746F-4EB2-81C5-F7C064519D44"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_119:*:*:*:*:*:*",
            "matchCriteriaId": "AD575960-0B66-48F9-BC9D-6F7DAEF0BCBC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_120:*:*:*:*:*:*",
            "matchCriteriaId": "776DF4D6-9CC1-4BC2-93D0-9DE2405716EA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "C0AABCDA-255E-4096-8DEF-483E0373E7F7"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "236CB75E-705A-46B3-A531-29E343AA024A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_127:*:*:*:*:*:*",
            "matchCriteriaId": "D1A5645A-D22D-4B5B-86FA-29642111FEDF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "B90AA06D-C905-4811-A93A-44F787563FB0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "8A1BC954-296C-4A94-847D-479825CDA84C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_146:*:*:*:*:*:*",
            "matchCriteriaId": "BADA45FE-319D-421F-B4B6-D221D78B69CC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "131ADAE9-9514-4C12-BE4D-312EB16F2E24"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_161:*:*:*:*:*:*",
            "matchCriteriaId": "9D912106-DC05-42B9-914B-A559ED20CAB6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_166:*:*:*:*:*:*",
            "matchCriteriaId": "31D18E59-D406-4263-83B1-F9267667AE1E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "CBA6E4FC-BDCC-425F-9D69-E9183548893A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_26:*:*:*:*:*:*",
            "matchCriteriaId": "6DF70422-7897-49CC-8874-A96D4CA64E11"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "F3240200-0517-43FD-BED2-D8AF844BF6E6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "BE6FBF0A-195F-4E52-9FBF-CD9A71EF3A36"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "57B969D9-DCC0-4B06-818F-CE2521C4C0C0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "CA897E69-E1CE-45A1-A0DB-A7BF444484F3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_53:*:*:*:*:*:*",
            "matchCriteriaId": "A13B8B4D-D746-432A-8833-BDF3A5A13CB4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_54:*:*:*:*:*:*",
            "matchCriteriaId": "CF0A7585-591D-4FA1-941E-55FB0207C207"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_65:*:*:*:*:*:*",
            "matchCriteriaId": "2A5B10FC-D9B5-4BB2-AD82-0B9AFB2AD0DE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_70:*:*:*:*:*:*",
            "matchCriteriaId": "ECE1DDA0-9A0A-44D5-919E-24810E7131B0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_76:*:*:*:*:*:*",
            "matchCriteriaId": "491F74B1-998F-459A-A27D-EB01597C9B01"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "A31115EC-8018-4EF3-B5D0-0F1EA2392680"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_8:*:*:*:*:*:*",
            "matchCriteriaId": "E415D02C-B30A-4210-8F14-47ABF46D4E64"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_84:*:*:*:*:*:*",
            "matchCriteriaId": "27AED864-AC5B-4FCF-9FD7-6E0D49569BB2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_89:*:*:*:*:*:*",
            "matchCriteriaId": "ABF3E632-8D50-4373-9576-0E710511D21B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_90:*:*:*:*:*:*",
            "matchCriteriaId": "C6229824-D7A7-439E-9FDD-95F753061410"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_92:*:*:*:*:*:*",
            "matchCriteriaId": "B218B25D-7722-435C-AA22-B5411E786277"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_96:*:*:*:*:*:*",
            "matchCriteriaId": "7A49ABD5-57B9-4E06-AFFE-8A1269BB16C8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_98:*:*:*:*:*:*",
            "matchCriteriaId": "3BFA1E0F-A214-4150-A0BD-44B5424A667E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_99:*:*:*:*:*:*",
            "matchCriteriaId": "265683A2-DA16-4CDC-AE9D-CE14BAB28A79"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:-:*:*:*:*:*:*",
            "matchCriteriaId": "2D16C37E-3064-4E15-8590-3B3020E4FF7E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "C01C66D8-5B48-4255-8246-9301EEA863DA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "22A0D74F-5216-40D9-B07C-8789A8E2D328"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "F2C763B7-B4BD-4915-A33B-9675DC2A1EA5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "1844D63C-499D-4185-B1B5-89FBE609F8FA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_12:*:*:*:*:*:*",
            "matchCriteriaId": "EC227225-ECF6-4025-B288-992ADE9B6B4B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "C7BF37CC-BE7A-4DDD-B5DA-8216B6FE9D44"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "7FD699CE-41C5-4A8D-BE52-35CBF1F16C96"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "673F8F1B-E64E-44D1-A793-F2B4ED56DDBD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_18:*:*:*:*:*:*",
            "matchCriteriaId": "927823EC-B157-4B5C-A4A3-F9D249C88E2C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "0DBDDAA3-3CA1-4490-8D43-C8C5C5188A6E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_25:*:*:*:*:*:*",
            "matchCriteriaId": "73AEA72B-8E44-4839-8651-5076EBC609B1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_33:*:*:*:*:*:*",
            "matchCriteriaId": "B11AA664-F3C8-44A6-AD11-14AF6AFAD2E2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_34:*:*:*:*:*:*",
            "matchCriteriaId": "0D511D85-A534-49A5-A9AE-88BC624311B6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "B0A2B178-FC15-4D76-9075-D605F87F350D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_39:*:*:*:*:*:*",
            "matchCriteriaId": "1360EBA1-B59B-472E-9019-9EB560A05699"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "F1301887-F38A-4FE6-9614-1FCF8FDE681C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "74DA6820-BE56-4115-A058-45CFF400DAA6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "54ECA176-C752-42C6-A9B2-CF408D8C580E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_60:*:*:*:*:*:*",
            "matchCriteriaId": "D2E35CA7-FED1-44E9-B144-1B51A2D7FB8B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_73:*:*:*:*:*:*",
            "matchCriteriaId": "DBA345D3-0FE7-4BE9-BEBB-96CD4055E546"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_91:*:*:*:*:*:*",
            "matchCriteriaId": "E2D4A292-EE3B-4A3A-9B16-E03626F82832"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "9381DBDF-5CE2-454C-BE04-859C9A197C90"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "F7442AF7-C511-4A15-AA85-FCB741F6A733"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "B9E02250-00AF-4684-A9A0-E9E4032DEA66"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "AC444B54-CFE5-4B7C-A885-9DE87394B132"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_40:*:*:*:*:*:*",
            "matchCriteriaId": "9B722ECE-8995-4D34-AC3B-3CEAF1FDAA08"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "E8D09FD6-5DC3-4C3A-8598-E91F86C5F657"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_6:*:*:*:*:*:*",
            "matchCriteriaId": "27057734-9870-4BA0-9A29-DB03FDFE485F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "E29151E7-2021-4553-8F70-AAE4AAB10188"
          }
        ]
      }
    ]
  },
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "r80",
            "versionEndExcluding": "r81.10",
            "matchCriteriaId": "B7EA18CB-4869-48C3-A9BC-0B0A6580FF1A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "E3EFE5C0-04CD-4B17-AD14-5035C2969047"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_106:*:*:*:*:*:*",
            "matchCriteriaId": "59FBDFE0-B5D7-44B5-B8A4-7ED87D8D1C13"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "BB2A0A91-CB75-455E-AA39-A4A79C8B574C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_109:*:*:*:*:*:*",
            "matchCriteriaId": "A8EFFC09-DF62-41C5-A719-30CC9D323F96"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_110:*:*:*:*:*:*",
            "matchCriteriaId": "C330AA5D-155B-4B29-968F-3A2B95EE7FAC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "653CF951-198E-4378-82E6-145052CF388A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_128:*:*:*:*:*:*",
            "matchCriteriaId": "8819E6BD-A6E0-4BC5-8BA8-A227266120E6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_129:*:*:*:*:*:*",
            "matchCriteriaId": "B5A0A754-1D52-4C50-80F3-CEB12F67E5AB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_130:*:*:*:*:*:*",
            "matchCriteriaId": "7444A711-160A-4B65-955A-509C0A169A6D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_131:*:*:*:*:*:*",
            "matchCriteriaId": "D11061E3-C47D-4B72-9226-960965DF73F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_132:*:*:*:*:*:*",
            "matchCriteriaId": "4DD733B2-3D1B-4EDF-B6E3-1F04089CDFF5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_135:*:*:*:*:*:*",
            "matchCriteriaId": "0FDDB709-B86E-4EF0-BFFF-E866F5AC13BE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_139:*:*:*:*:*:*",
            "matchCriteriaId": "3C2F9CF0-6684-4353-A4A1-7D117CF8032D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "EE2DD8DD-3060-4029-AE0E-861DE3EF6C3F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "F19DC5F4-4F3D-47E9-9EE1-71EC0FDF2D17"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_150:*:*:*:*:*:*",
            "matchCriteriaId": "76101CB6-BD1F-4E0D-BB88-9CC7EA3E84C8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_152:*:*:*:*:*:*",
            "matchCriteriaId": "A7628981-6822-44C0-82AC-43BE06DEA3E3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_156:*:*:*:*:*:*",
            "matchCriteriaId": "BBB95805-9CCC-4220-B4C1-BF5535968998"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "7E441395-16C7-4AFD-BCE5-B7CCED66AEC3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_165:*:*:*:*:*:*",
            "matchCriteriaId": "93B0F1EF-1EA1-45A3-ABE1-0BA9E29E8820"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_169:*:*:*:*:*:*",
            "matchCriteriaId": "41F7E1A6-F1FA-409A-A8BF-40DDB5EB00FF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_170:*:*:*:*:*:*",
            "matchCriteriaId": "D3CC56EB-2456-485F-B7DF-B3F25FB99554"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_171:*:*:*:*:*:*",
            "matchCriteriaId": "5EEC17E9-CEF9-4FB2-B1D9-43728013D096"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_172:*:*:*:*:*:*",
            "matchCriteriaId": "727BE9AD-AF6C-4159-9932-496480C8B436"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_173:*:*:*:*:*:*",
            "matchCriteriaId": "A0B43191-7C2E-46EE-825C-05000A7FBFEC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_174:*:*:*:*:*:*",
            "matchCriteriaId": "40EBD18C-3A36-43DA-B045-631CC7517F25"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_177:*:*:*:*:*:*",
            "matchCriteriaId": "8891CA25-BB20-4A71-90CA-B94422B71EA5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_181:*:*:*:*:*:*",
            "matchCriteriaId": "40776587-1731-4579-A8C6-619DB6DDD3F2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_183:*:*:*:*:*:*",
            "matchCriteriaId": "268462D2-87BD-4144-9255-163DB1711917"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_187:*:*:*:*:*:*",
            "matchCriteriaId": "858E5667-5661-4DC9-9017-498F0C107699"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_190:*:*:*:*:*:*",
            "matchCriteriaId": "DD908FC8-7991-41F9-87C1-45DA624B24B5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_22:*:*:*:*:*:*",
            "matchCriteriaId": "39876606-2D2B-49FC-9A7F-9A564418EB8C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_30:*:*:*:*:*:*",
            "matchCriteriaId": "A3F582E0-A364-4B88-9C06-3796707745FD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "8490D7B3-4553-457F-A89C-136911626C70"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "59CA7C8E-63D3-48D4-AA6F-DEB270976A5E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "D6E1781C-58C6-4336-9354-40166B88B6C5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_55:*:*:*:*:*:*",
            "matchCriteriaId": "7A05B5FE-A04D-4A75-A1A6-89BB2A00A0E1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_61:*:*:*:*:*:*",
            "matchCriteriaId": "7101AE06-0C27-4A04-A232-10E4327A9C18"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_66:*:*:*:*:*:*",
            "matchCriteriaId": "47EE9CF9-65D8-4DB3-82EA-ECC20447B037"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_75:*:*:*:*:*:*",
            "matchCriteriaId": "0E784373-CFE7-4598-809F-5C4DBCEF70AA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_78:*:*:*:*:*:*",
            "matchCriteriaId": "AEF420B8-0D77-47B1-A19E-9311BD86CA6E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "B5B93BB5-16BB-452A-97D5-10C7772F660F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_81:*:*:*:*:*:*",
            "matchCriteriaId": "A1F6B14B-40C5-4FEF-BC85-84E4B4361079"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_82:*:*:*:*:*:*",
            "matchCriteriaId": "3ECC6338-F541-449F-AD62-9D852F4E7454"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_85:*:*:*:*:*:*",
            "matchCriteriaId": "B14FD6AB-A559-49B9-9C97-978647042EAC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_87:*:*:*:*:*:*",
            "matchCriteriaId": "D6F74C50-FB32-446F-94FF-F5342D56741A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_9:*:*:*:*:*:*",
            "matchCriteriaId": "B531E951-4293-45C1-A779-9B7052704AC8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_93:*:*:*:*:*:*",
            "matchCriteriaId": "FCA346D0-0D8E-4FB4-AE11-E0A062A339BD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_94:*:*:*:*:*:*",
            "matchCriteriaId": "9F6F7CC6-CC82-40BE-88FE-0A2B43ACA314"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_95:*:*:*:*:*:*",
            "matchCriteriaId": "7C669D64-A6B6-495A-BBC2-62B6947978E0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "A8F7304B-C04F-4C5B-9E98-D736C55A0AE2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "A897D6EA-56D9-4246-9985-9BCE0B5B575E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_101:*:*:*:*:*:*",
            "matchCriteriaId": "A93B1873-08AD-45D4-9F27-D76DEBD445E4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "C29DD086-7438-45BD-B1DC-B20D2753A7E2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_105:*:*:*:*:*:*",
            "matchCriteriaId": "A7792771-5225-4B15-8B12-94AC5DB158D8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_111:*:*:*:*:*:*",
            "matchCriteriaId": "54CF3193-F101-4BD9-952F-47886308799B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "F012878A-86CE-4881-94C1-CA39420E2888"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_115:*:*:*:*:*:*",
            "matchCriteriaId": "E8A50B35-2459-43C2-840B-D3BC78837C6A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "C62D9794-379F-4722-B467-0CFE65A12B80"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_119:*:*:*:*:*:*",
            "matchCriteriaId": "D92A32EE-259C-423B-B422-A765EF4426F9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_120:*:*:*:*:*:*",
            "matchCriteriaId": "668D309B-DA82-4EC4-9F09-A5772BC17447"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "1230C289-7789-471F-9EA3-2FE2DCDA6981"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "96187221-D11F-4CFA-83AD-0548A528C320"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_127:*:*:*:*:*:*",
            "matchCriteriaId": "AF79E967-AEE7-494E-B8E4-94ABFE8BEFB7"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "E450F71D-626F-4515-91A2-5F4FCD8FE21D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "6E73C0C0-227D-42EA-9E5F-BD9120E94213"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_146:*:*:*:*:*:*",
            "matchCriteriaId": "926F2DA0-8168-4EED-BB8E-E9A7BC185970"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "5B16C81F-361A-475A-A7EF-417738EC555A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_161:*:*:*:*:*:*",
            "matchCriteriaId": "1A14DC8E-32C7-4BA9-A88E-6D03F8473DDD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_166:*:*:*:*:*:*",
            "matchCriteriaId": "34C9AF5B-F155-4D9C-B4B4-730696A85873"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "273F628E-2889-412C-BC02-82FEEF4CE6AF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_26:*:*:*:*:*:*",
            "matchCriteriaId": "40CC00A2-E57F-49B8-BD9A-A3107258EFF9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "38C33CF8-3FA4-4775-91CF-83B9A4B51B5D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "186C5B76-630C-483E-9C44-27BA00A1365B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "965C32C2-BAD2-415A-B8F3-A5B2A96C077F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "1D7B7908-F110-4937-A16F-E942F7EE94E8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_53:*:*:*:*:*:*",
            "matchCriteriaId": "A7CE4E97-2553-4B54-9B49-2AEFFF1E97DF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_54:*:*:*:*:*:*",
            "matchCriteriaId": "C3BB26FE-A7A4-4C0C-82E0-3B690C08AF4D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_65:*:*:*:*:*:*",
            "matchCriteriaId": "CC0BAF78-22E6-4F90-885D-654A317832C3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_70:*:*:*:*:*:*",
            "matchCriteriaId": "2CEFB387-F28B-4A26-B0BD-A99D88765CF2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_76:*:*:*:*:*:*",
            "matchCriteriaId": "05C5D50F-DD77-4B91-9B98-EA79206E3AEC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "E7A2F23D-A588-4895-91CB-F4726D244E71"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_8:*:*:*:*:*:*",
            "matchCriteriaId": "496C913F-16A4-4710-80EB-0444ED57F981"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_84:*:*:*:*:*:*",
            "matchCriteriaId": "F7B7D466-132A-4584-B6D8-68C05F02E3AE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_89:*:*:*:*:*:*",
            "matchCriteriaId": "B8DDE050-D1E9-4E42-A511-FE85C5482EAD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_90:*:*:*:*:*:*",
            "matchCriteriaId": "2508B0C0-F3F7-4993-A90B-31DBD299C7EB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_92:*:*:*:*:*:*",
            "matchCriteriaId": "EB51FD59-0119-4335-851F-65F108E34885"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_96:*:*:*:*:*:*",
            "matchCriteriaId": "F26A6EE5-5083-42BE-822A-66BB279B68F6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_98:*:*:*:*:*:*",
            "matchCriteriaId": "D3BC31FE-EE44-4919-96F1-A3CD9EB2E6F9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_99:*:*:*:*:*:*",
            "matchCriteriaId": "54AF1EBC-02AE-4303-93E9-ACE2C15831B3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:-:*:*:*:*:*:*",
            "matchCriteriaId": "9A4DD35F-132E-4CB4-846C-8C0A0DAE11A3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "28B96884-0ED3-4B3F-9FF2-D9826C6A11C8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "498B5193-9227-408B-BB96-93D47FE6C136"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "5F5BF964-A06C-46B4-BBAF-B992F2BFE5BA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "D6BC96F7-EA95-4126-AF11-CA51E710B8B5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_12:*:*:*:*:*:*",
            "matchCriteriaId": "25CBBD3E-F6BC-44A8-ADF8-A2A683C4FD90"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "09AFB3C5-3E13-4079-B732-9994FB108B80"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "4BB9DABC-4207-4BE4-80B9-5431BE8924CC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "A593B6C5-F968-4C08-9CEC-0D04CBCFCBAE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_18:*:*:*:*:*:*",
            "matchCriteriaId": "B08AEDE4-10E7-49B1-A7E3-343C16651E0C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "F52CCFD6-8E42-4704-BCDB-8D4743AD8878"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_25:*:*:*:*:*:*",
            "matchCriteriaId": "D1A5BD3C-6C81-4948-BD6E-351AE54E051B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_33:*:*:*:*:*:*",
            "matchCriteriaId": "92E9C407-AAF6-4FE8-ABF8-28E78090C2F5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_34:*:*:*:*:*:*",
            "matchCriteriaId": "17892B1E-CFC8-4A21-A654-0C67AE1CEA02"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "782C1482-BF59-4663-A17F-A10247715223"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_39:*:*:*:*:*:*",
            "matchCriteriaId": "ECB15DB7-ACF9-4D7E-8BAC-C65634E7C813"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "D5E45EF8-9B5E-4AAB-8952-9358AC1625D4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "BAA7ADEB-B8BF-41C3-B8F9-44B3F617A8B6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "539F141A-9129-418A-8C86-8DF565A0106B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_60:*:*:*:*:*:*",
            "matchCriteriaId": "2F1C55C8-9EFD-4B74-A1B9-83E1B8B4B306"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_73:*:*:*:*:*:*",
            "matchCriteriaId": "BC2BB169-1FE9-4DD9-95DD-C2875068B976"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_91:*:*:*:*:*:*",
            "matchCriteriaId": "7924252E-97BB-4ADE-81CA-4EB974B6FD51"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "4005C231-9EA2-40A5-A2F0-5A94EA498E96"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "395F93BF-DAC3-4213-AA34-D708570B5B9F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "CF84D1C9-E656-4CBF-85DB-3AE434DF87F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "43F8A4D6-ECED-4155-A41C-48B1506D32B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_40:*:*:*:*:*:*",
            "matchCriteriaId": "5ABBDE5D-BD23-45CE-BDA8-3168C53803B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "5D89F1B2-43E0-486D-AEC6-0D1B35C4B8A4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_6:*:*:*:*:*:*",
            "matchCriteriaId": "05B0445D-E33E-4F3F-B21C-B6988C8F0BBB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "10FE3305-F601-4757-9080-E7F41B2974AA"
          }
        ]
      }
    ]
  }
]

04CVE-2026-104286

Fortinet · FortiMail

Ahora · Prioridad 85/100

NVD: CVE-2026-104286 CVE.org: CVE-2026-104286 ¿Tu versión está afectada?

Fortinet FortiMail Path Traversal Vulnerability

en CISA KEV (explotación confirmada) hace 14 días
EPSS en percentil ≥ 80
CVSS crítico ≥ 9

CVSS 9.8EPSS 2.20%Percentil 82.2%

KEV: 2026-10-01 · Ransomware: desconocido · Plazo CISA: 2026-10-04

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.2.0",
            "versionEndIncluding": "7.4.8",
            "matchCriteriaId": "77C9CE10-1038-4100-81E0-234822E6373B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.6.0",
            "versionEndIncluding": "7.6.6",
            "matchCriteriaId": "1EA73418-A7A1-4247-BA3E-969550962E0E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "8.0.0",
            "versionEndIncluding": "8.0.1",
            "matchCriteriaId": "DDAF1B20-36CA-4DD4-9483-6B605001B9DA"
          }
        ]
      }
    ]
  }
]

05CVE-2026-59310

Broadcom · VMware vCenter

Ahora · Prioridad 85/100

NVD: CVE-2026-59310 CVE.org: CVE-2026-59310

Broadcom VMware vCenter Path Traversal Vulnerability

en CISA KEV (explotación confirmada) hace 58 días
ligada a ransomware
EPSS en percentil ≥ 80

CVSS sin puntuarEPSS 2.56%Percentil 84.8%

KEV: 2026-08-18 · Ransomware: reportado · Plazo CISA: 2026-08-21

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

06CVE-2026-63077

JetBrains · TeamCity

Ahora · Prioridad 85/100

NVD: CVE-2026-63077 CVE.org: CVE-2026-63077

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

en CISA KEV (explotación confirmada) hace 71 días
ligada a ransomware
EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 89.57%Percentil 99.8%

KEV: 2026-08-05 · Ransomware: reportado · Plazo CISA: 2026-08-08

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

07CVE-2026-87902

WordPress · Core

Ahora · Prioridad 85/100

NVD: CVE-2026-87902 CVE.org: CVE-2026-87902

WordPress Core Remote File Inclusion Vulnerability

en CISA KEV (explotación confirmada) hace 20 días
EPSS en percentil ≥ 95

CVSS 8.1EPSS 39.98%Percentil 98.6%

KEV: 2026-09-25 · Ransomware: desconocido · Plazo CISA: 2026-09-28

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "4.7.37",
            "matchCriteriaId": "F1CFA516-E292-436E-9B45-BD6ACB344205"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "4.8",
            "versionEndExcluding": "4.8.32",
            "matchCriteriaId": "8EEBFAB5-8903-4D4E-9847-A50A3F840878"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "4.9",
            "versionEndExcluding": "4.9.33",
            "matchCriteriaId": "5A7719CA-2099-45E9-8E48-64EF672C76C0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.0",
            "versionEndExcluding": "5.0.29",
            "matchCriteriaId": "BFA3645E-7056-449B-9DEB-D9D53EB21488"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.1",
            "versionEndExcluding": "5.1.26",
            "matchCriteriaId": "3582671F-7248-420A-8DF7-F32742D0D2AF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.2",
            "versionEndExcluding": "5.2.28",
            "matchCriteriaId": "FD9C147A-9FCB-46A7-8409-4AE652986FDC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.3",
            "versionEndExcluding": "5.3.25",
            "matchCriteriaId": "73C13CF0-B293-47C4-93AA-F46E0323A9C1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.4",
            "versionEndExcluding": "5.4.23",
            "matchCriteriaId": "7FB5AE52-9590-4B1D-BDFF-A522EFDD55DC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.5",
            "versionEndExcluding": "5.5.22",
            "matchCriteriaId": "72A42175-5759-47B1-8E87-ADAF0CDB73C7"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.6",
            "versionEndExcluding": "5.6.21",
            "matchCriteriaId": "5D7C48F3-BBB2-4943-A6F2-E652997034FE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.7",
            "versionEndExcluding": "5.7.19",
            "matchCriteriaId": "D23FACBB-B9EC-4490-B328-24833FEF6209"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.8",
            "versionEndExcluding": "5.8.17",
            "matchCriteriaId": "47F4A57C-CA16-4E9A-B0C2-EBB5FCCB41B9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.9",
            "versionEndExcluding": "5.9.18",
            "matchCriteriaId": "83CC56B0-F56E-4862-B74E-B106092C73F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.0",
            "versionEndExcluding": "6.0.16",
            "matchCriteriaId": "E3EE7487-2943-4229-8B04-8787FE730FCB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.1",
            "versionEndExcluding": "6.1.14",
            "matchCriteriaId": "E83A61A6-8FBC-4AF6-98E6-0152CA380AA0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.2",
            "versionEndExcluding": "6.2.13",
            "matchCriteriaId": "D97C90F9-83C3-4057-A7E2-61787BC24E05"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.3",
            "versionEndExcluding": "6.3.12",
            "matchCriteriaId": "D7DA40D7-228A-4CFF-8CC8-32321BB1D3C5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.4",
            "versionEndExcluding": "6.4.12",
            "matchCriteriaId": "DDE93788-7DAB-475C-B6AE-753780DE8160"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.5",
            "versionEndExcluding": "6.5.12",
            "matchCriteriaId": "18808A77-C445-4D07-A364-A676F2D7FD63"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.6",
            "versionEndExcluding": "6.6.9",
            "matchCriteriaId": "ADEAA29A-1862-476B-8F21-684D8799589E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.7",
            "versionEndExcluding": "6.7.9",
            "matchCriteriaId": "D3BD738C-4601-43C1-A5BC-E5AFB0189CD9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.8",
            "versionEndExcluding": "6.8.10",
            "matchCriteriaId": "4A6867FC-850F-437B-8532-63A5F747D64F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.9",
            "versionEndExcluding": "6.9.9",
            "matchCriteriaId": "5C21A09B-5001-4F4E-A49D-4F29032AF612"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.0",
            "versionEndExcluding": "7.0.6",
            "matchCriteriaId": "6FC26EAE-8D7D-4BF9-AACE-75C6AB13279F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.1",
            "versionEndExcluding": "7.1.2",
            "matchCriteriaId": "525A2372-93E8-447E-BBB7-F795C08B3E2B"
          }
        ]
      }
    ]
  }
]

08CVE-2015-3306

ProFTPD · ProFTPD

Ahora · Prioridad 84/100

NVD: CVE-2015-3306 CVE.org: CVE-2015-3306

ProFTPD Improper Access Control Vulnerability

en CISA KEV (explotación confirmada) hace 7 días
EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 99.50%Percentil 99.9%

KEV: 2026-10-08 · Ransomware: desconocido · Plazo CISA: 2026-10-11

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

09CVE-2015-5477

ISC · BIND

Ahora · Prioridad 84/100

NVD: CVE-2015-5477 CVE.org: CVE-2015-5477

ISC BIND Data Processing Errors Vulnerability

en CISA KEV (explotación confirmada) hace 7 días
EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 99.41%Percentil 99.9%

KEV: 2026-10-08 · Ransomware: desconocido · Plazo CISA: 2026-10-11

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

10CVE-2016-3081

Apache · Struts

Ahora · Prioridad 84/100

NVD: CVE-2016-3081 CVE.org: CVE-2016-3081

Apache Struts Command Injection Vulnerability

en CISA KEV (explotación confirmada) hace 7 días
EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 96.05%Percentil 99.9%

KEV: 2026-10-08 · Ransomware: desconocido · Plazo CISA: 2026-10-11

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

Incorporaciones a KEV · 12 semanas

Semanas ISO; la última está en curso. Escala desde cero.

Ver tabla de datos semanales

Incorporaciones a KEV por semana ISO
Semana	CVEs añadidos
2026-W31	3
2026-W32	6
2026-W33	3
2026-W34	9
2026-W35	11
2026-W36	10
2026-W37	14
2026-W38	7
2026-W39	12
2026-W40	6
2026-W41	5
2026-W42	6

CISA KEV · actualizado hace 2 h

Fabricantes más explotados (90 días)

Por CVEs incorporados a KEV; no mide ataques ni cuota de mercado.

Microsoft9
Cisco7
Citrix5
Linux5
JFrog4
Check Point3
Fortinet3
Google3
MikroTik3
N-able3

CISA KEV · actualizado hace 2 h

Explora el catálogo

KEV completo + críticas publicadas en 30 días · 3,257 registros (los 10 primeros están arriba) · Orden: prioridad descendente

PrioridadFabricanteCVSS mínimo Solo KEVLimpiar filtros

2611CVE-2026-87186

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

NVD: CVE-2026-87186 CVE.org: CVE-2026-87186

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.6EPSS 0.40%Percentil 31.8%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]

2612CVE-2026-87188

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

NVD: CVE-2026-87188 CVE.org: CVE-2026-87188

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.51%Percentil 41.6%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]

2613CVE-2026-87189

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

NVD: CVE-2026-87189 CVE.org: CVE-2026-87189

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.49%Percentil 40.0%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]

2614CVE-2026-87214

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

NVD: CVE-2026-87214 CVE.org: CVE-2026-87214

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.49%Percentil 40.0%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]

2615CVE-2026-87217

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

NVD: CVE-2026-87217 CVE.org: CVE-2026-87217

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.43%Percentil 34.9%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]

2616CVE-2026-87223

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

NVD: CVE-2026-87223 CVE.org: CVE-2026-87223

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.45%Percentil 37.0%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]

2617CVE-2026-87230

oracle · hyperion_financial_management

Vigilar · Prioridad 24/100

NVD: CVE-2026-87230 CVE.org: CVE-2026-87230

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 10EPSS 0.43%Percentil 34.9%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:oracle:hyperion_financial_management:11.2.26.0.000:*:*:*:*:*:*:*",
            "matchCriteriaId": "E79A81FE-59F7-4F46-BD02-94D8FFF1D587"
          }
        ]
      }
    ]
  }
]

2618CVE-2026-87701

microsoft · azure_cosmos_db

Vigilar · Prioridad 24/100

NVD: CVE-2026-87701 CVE.org: CVE-2026-87701

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.6EPSS 0.79%Percentil 55.0%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:microsoft:azure_cosmos_db:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "4E7E9C60-1563-425D-AAE9-787A67AF6954"
          }
        ]
      }
    ]
  }
]

2619CVE-2026-87719

gitlab · gitlab

Vigilar · Prioridad 24/100

NVD: CVE-2026-87719 CVE.org: CVE-2026-87719

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain cond

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.57%Percentil 45.6%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding": "18.3.0",
            "versionEndExcluding": "18.11.12",
            "matchCriteriaId": "ADCF3C9C-EF4C-4746-BC68-1185489BE99B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding": "19.0.0",
            "versionEndExcluding": "19.0.9",
            "matchCriteriaId": "94A5B71B-5FDA-4758-9095-77AA1225282F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding": "19.1.0",
            "versionEndExcluding": "19.1.8",
            "matchCriteriaId": "A7AFE4A6-85DB-4CA2-AE8A-A5EC6521520C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding": "19.2.0",
            "versionEndExcluding": "19.2.6",
            "matchCriteriaId": "8598AF82-D212-4B5D-ABC3-C12C9B217BF3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding": "19.3.0",
            "versionEndExcluding": "19.3.2",
            "matchCriteriaId": "03B1901F-AAF4-421E-B704-5345CB840DEF"
          }
        ]
      }
    ]
  }
]

2620CVE-2026-87785

Apache Software Foundation · Apache Syncope

Vigilar · Prioridad 24/100

NVD: CVE-2026-87785 CVE.org: CVE-2026-87785

Apache Syncope: JWT subject spoofing

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.55%Percentil 44.3%

Versiones y rangos reportados

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Syncope",
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "packageName": "org.apache.syncope.core:syncope-core-spring",
    "packageURL": "pkg:maven/org.apache.syncope.core/syncope-core-spring",
    "versions": [
      {
        "status": "affected",
        "version": "3.0.0-M0",
        "lessThanOrEqual": "3.0.16",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.0.0-M0",
        "lessThanOrEqual": "4.0.7",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.1.0-M0",
        "lessThanOrEqual": "4.1.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2621CVE-2026-87796

sh1zen · Multi Uploader for Gravity Forms

Vigilar · Prioridad 24/100

NVD: CVE-2026-87796 CVE.org: CVE-2026-87796

Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 1.14%Percentil 65.7%

Versiones y rangos reportados

[
  {
    "vendor": "sh1zen",
    "product": "Multi Uploader for Gravity Forms",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2622CVE-2026-87799

Canonical · LXD

Vigilar · Prioridad 24/100

NVD: CVE-2026-87799 CVE.org: CVE-2026-87799

Arbitrary file write on LXD host via symlink in migration stream

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.41%Percentil 33.0%

Versiones y rangos reportados

[
  {
    "vendor": "Canonical",
    "product": "LXD",
    "platforms": [
      "Linux"
    ],
    "packageName": "LXD",
    "repo": "https://github.com/canonical/lxd",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.0",
        "lessThan": "4.0.14",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.0.0",
        "lessThan": "5.0.10",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.21.0",
        "lessThan": "5.21.8",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.0",
        "lessThan": "6.10",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2623CVE-2026-87802

Apache Software Foundation · Apache Syncope

Vigilar · Prioridad 24/100

NVD: CVE-2026-87802 CVE.org: CVE-2026-87802

Apache Syncope: SRA OAuth2 JWT signature verification bypass

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.28%Percentil 18.5%

Versiones y rangos reportados

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Syncope",
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "packageName": "org.apache.syncope:syncope-sra",
    "packageURL": "pkg:maven/org.apache.syncope/syncope-sra",
    "versions": [
      {
        "status": "affected",
        "version": "3.0.0-M0",
        "lessThanOrEqual": "3.0.16",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.0.0-M0",
        "lessThanOrEqual": "4.0.7",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.1.0-M0",
        "lessThanOrEqual": "4.1.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2624CVE-2026-87830

apache · wss4j

Vigilar · Prioridad 24/100

NVD: CVE-2026-87830 CVE.org: CVE-2026-87830

In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A remote SOAP peer may th

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.21%Percentil 10.7%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:apache:wss4j:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "2.4.4",
            "matchCriteriaId": "A3409718-5467-407D-9B51-14E58B6D2F68"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:apache:wss4j:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "3.0.0",
            "versionEndExcluding": "3.0.6",
            "matchCriteriaId": "31AFF243-7BCE-44BC-85C5-6FE257642C13"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:apache:wss4j:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "4.0.0",
            "versionEndExcluding": "4.0.2",
            "matchCriteriaId": "20E76C98-444D-4DB5-91E0-90E84C196158"
          }
        ]
      }
    ]
  }
]

2625CVE-2026-87898

WebPros · Plesk extension "Site Import"

Vigilar · Prioridad 24/100

NVD: CVE-2026-87898 CVE.org: CVE-2026-87898

OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges.

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.4EPSS 1.01%Percentil 62.0%

Versiones y rangos reportados

[
  {
    "vendor": "WebPros",
    "product": "Plesk extension \"Site Import\"",
    "versions": [
      {
        "version": "1.6.6",
        "status": "affected",
        "lessThanOrEqual": "1.12.1",
        "versionType": "semver"
      },
      {
        "version": "1.12.2",
        "status": "unaffected",
        "lessThan": "1.12.2",
        "versionType": "semver"
      }
    ]
  }
]

2626CVE-2026-87899

WebPros · cPanel

Vigilar · Prioridad 24/100

NVD: CVE-2026-87899 CVE.org: CVE-2026-87899

Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.4EPSS 0.58%Percentil 45.9%

Versiones y rangos reportados

[
  {
    "vendor": "WebPros",
    "product": "cPanel",
    "versions": [
      {
        "version": "11.120.0.0",
        "status": "affected",
        "lessThan": "11.134.0.57",
        "versionType": "semver"
      },
      {
        "version": "11.136.0.0",
        "status": "affected",
        "lessThan": "11.136.0.41",
        "versionType": "semver"
      },
      {
        "version": "11.138.0.0",
        "status": "affected",
        "lessThan": "11.138.0.8",
        "versionType": "semver"
      },
      {
        "version": "11.134.0.57",
        "status": "unaffected",
        "lessThan": "11.134.0.57",
        "versionType": "semver"
      },
      {
        "version": "11.136.0.41",
        "status": "unaffected",
        "lessThan": "11.136.0.41",
        "versionType": "semver"
      },
      {
        "version": "11.138.0.8",
        "status": "unaffected",
        "lessThan": "11.138.0.8",
        "versionType": "semver"
      }
    ]
  }
]

2627CVE-2026-87900

WebPros · WP Toolkit for cPanel

Vigilar · Prioridad 24/100

NVD: CVE-2026-87900 CVE.org: CVE-2026-87900

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.4EPSS 0.61%Percentil 47.9%

Versiones y rangos reportados

[
  {
    "vendor": "WebPros",
    "product": "WP Toolkit for cPanel",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "6.11.2-10794",
        "versionType": "semver"
      },
      {
        "version": "6.11.3-10850",
        "status": "unaffected",
        "lessThan": "6.11.3-10850",
        "versionType": "semver"
      }
    ]
  }
]

2628CVE-2026-88131

Microsoft · Microsoft Dataverse

Vigilar · Prioridad 24/100

NVD: CVE-2026-88131 CVE.org: CVE-2026-88131

Microsoft Dataverse Remote Code Execution Vulnerability

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.84%Percentil 56.7%

Versiones y rangos reportados

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Dataverse",
    "versions": [
      {
        "version": "-",
        "status": "affected"
      }
    ]
  }
]

2629CVE-2026-88351

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88351 CVE.org: CVE-2026-88351

An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32 object with an excessively large elemen

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.31%Percentil 21.7%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2630CVE-2026-88365

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88365 CVE.org: CVE-2026-88365

minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when parsing the APEv2 tag-size field.

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.36%Percentil 27.6%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2631CVE-2026-88378

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88378 CVE.org: CVE-2026-88378

QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.45%Percentil 37.1%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2632CVE-2026-88391

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88391 CVE.org: CVE-2026-88391

Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar/**, so /h2-console is exposed with no authentication and th

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.36%Percentil 27.6%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2633CVE-2026-88393

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88393 CVE.org: CVE-2026-88393

WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array() function

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.39%Percentil 30.8%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2634CVE-2026-88395

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88395 CVE.org: CVE-2026-88395

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter.

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.39%Percentil 31.5%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2635CVE-2026-88402

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88402 CVE.org: CVE-2026-88402

A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements.

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.47%Percentil 38.7%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2636CVE-2026-88404

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88404 CVE.org: CVE-2026-88404

A remote code execution (RCE) vulnerability in the UniscriptExecutionService.execute() function (/services/script-execution.service.ts) of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary c

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.75%Percentil 53.7%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2637CVE-2026-88405

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88405 CVE.org: CVE-2026-88405

A remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function (/remote/remote-register-function.service.ts) of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary c

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.75%Percentil 53.7%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2638CVE-2026-88414

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88414 CVE.org: CVE-2026-88414

MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.41%Percentil 33.8%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2639CVE-2026-88416

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88416 CVE.org: CVE-2026-88416

MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.32%Percentil 22.9%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2640CVE-2026-88424

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88424 CVE.org: CVE-2026-88424

FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter(). This vulnerability allows attackers to access sensitive databas

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.28%Percentil 18.8%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2641CVE-2026-88592

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88592 CVE.org: CVE-2026-88592

kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF). The cross-origin file proxy endpoint /getCorsFile is protected by TrustHostFilter against the trust.host whitelist. However, th

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.21%Percentil 10.5%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2642CVE-2026-88617

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88617 CVE.org: CVE-2026-88617

SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint. This allows a remote attacker to escalate privileges.

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.61%Percentil 47.7%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2643CVE-2026-88624

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88624 CVE.org: CVE-2026-88624

Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload.

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.34%Percentil 26.0%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2644CVE-2026-88647

n/a · n/a

Vigilar · Prioridad 24/100

NVD: CVE-2026-88647 CVE.org: CVE-2026-88647

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.21%Percentil 10.6%

Versiones y rangos reportados

[
  {
    "vendor": "n/a",
    "product": "n/a",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

2645CVE-2026-88773

citrix · netscaler_application_delivery_controller

Vigilar · Prioridad 24/100

NVD: CVE-2026-88773 CVE.org: CVE-2026-88773

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 10EPSS 0.36%Percentil 28.0%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1-64.23",
            "matchCriteriaId": "6BC2D462-9ABE-4024-8E46-8D265C0B19FB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1.37.279",
            "matchCriteriaId": "2DB314FE-3886-4ABD-A820-B8A70EBB23A6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1.37.279",
            "matchCriteriaId": "FCFFA1B3-87CE-4CC8-990E-D3CE0B55CD45"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
            "versionStartIncluding": "14.1",
            "versionEndExcluding": "14.1-73.37",
            "matchCriteriaId": "1CA9588A-E3EB-44FC-9515-6EB89BB8C1D6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
            "versionStartIncluding": "14.1-66.68",
            "versionEndIncluding": "14.1-73.37",
            "matchCriteriaId": "046FF602-D956-4961-89BF-2041A3590004"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1-64.23",
            "matchCriteriaId": "3286D2C3-EA7E-4D9C-95DE-05D462DC8B1B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "14.1",
            "versionEndExcluding": "14.1-73.37",
            "matchCriteriaId": "C77243A7-1FDB-4557-88BE-EDF3BAA56A81"
          }
        ]
      }
    ]
  }
]

2646CVE-2026-88775

citrix · netscaler_application_delivery_controller

Vigilar · Prioridad 24/100

NVD: CVE-2026-88775 CVE.org: CVE-2026-88775

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS a

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.38%Percentil 30.5%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1-64.23",
            "matchCriteriaId": "6BC2D462-9ABE-4024-8E46-8D265C0B19FB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1.37.279",
            "matchCriteriaId": "2DB314FE-3886-4ABD-A820-B8A70EBB23A6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1.37.279",
            "matchCriteriaId": "FCFFA1B3-87CE-4CC8-990E-D3CE0B55CD45"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
            "versionStartIncluding": "14.1",
            "versionEndExcluding": "14.1-73.37",
            "matchCriteriaId": "1CA9588A-E3EB-44FC-9515-6EB89BB8C1D6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
            "versionStartIncluding": "14.1-66.68",
            "versionEndIncluding": "14.1-73.37",
            "matchCriteriaId": "046FF602-D956-4961-89BF-2041A3590004"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1-64.23",
            "matchCriteriaId": "3286D2C3-EA7E-4D9C-95DE-05D462DC8B1B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "14.1",
            "versionEndExcluding": "14.1-73.37",
            "matchCriteriaId": "C77243A7-1FDB-4557-88BE-EDF3BAA56A81"
          }
        ]
      }
    ]
  }
]

2647CVE-2026-88776

citrix · netscaler_application_delivery_controller

Vigilar · Prioridad 24/100

NVD: CVE-2026-88776 CVE.org: CVE-2026-88776

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.38%Percentil 30.5%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1-64.23",
            "matchCriteriaId": "6BC2D462-9ABE-4024-8E46-8D265C0B19FB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1.37.279",
            "matchCriteriaId": "2DB314FE-3886-4ABD-A820-B8A70EBB23A6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1.37.279",
            "matchCriteriaId": "FCFFA1B3-87CE-4CC8-990E-D3CE0B55CD45"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
            "versionStartIncluding": "14.1",
            "versionEndExcluding": "14.1-73.37",
            "matchCriteriaId": "1CA9588A-E3EB-44FC-9515-6EB89BB8C1D6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
            "versionStartIncluding": "14.1-66.68",
            "versionEndIncluding": "14.1-73.37",
            "matchCriteriaId": "046FF602-D956-4961-89BF-2041A3590004"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1-64.23",
            "matchCriteriaId": "3286D2C3-EA7E-4D9C-95DE-05D462DC8B1B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "14.1",
            "versionEndExcluding": "14.1-73.37",
            "matchCriteriaId": "C77243A7-1FDB-4557-88BE-EDF3BAA56A81"
          }
        ]
      }
    ]
  }
]

2648CVE-2026-88777

citrix · netscaler_application_delivery_controller

Vigilar · Prioridad 24/100

NVD: CVE-2026-88777 CVE.org: CVE-2026-88777

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.38%Percentil 30.5%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1-64.23",
            "matchCriteriaId": "6BC2D462-9ABE-4024-8E46-8D265C0B19FB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1.37.279",
            "matchCriteriaId": "2DB314FE-3886-4ABD-A820-B8A70EBB23A6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1.37.279",
            "matchCriteriaId": "FCFFA1B3-87CE-4CC8-990E-D3CE0B55CD45"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
            "versionStartIncluding": "14.1",
            "versionEndExcluding": "14.1-73.37",
            "matchCriteriaId": "1CA9588A-E3EB-44FC-9515-6EB89BB8C1D6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
            "versionStartIncluding": "14.1-66.68",
            "versionEndIncluding": "14.1-73.37",
            "matchCriteriaId": "046FF602-D956-4961-89BF-2041A3590004"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "13.1",
            "versionEndExcluding": "13.1-64.23",
            "matchCriteriaId": "3286D2C3-EA7E-4D9C-95DE-05D462DC8B1B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "14.1",
            "versionEndExcluding": "14.1-73.37",
            "matchCriteriaId": "C77243A7-1FDB-4557-88BE-EDF3BAA56A81"
          }
        ]
      }
    ]
  }
]

2649CVE-2026-88795

Unknown · wpShopGermany IT-RECHT KANZLEI

Vigilar · Prioridad 24/100

NVD: CVE-2026-88795 CVE.org: CVE-2026-88795

wpShopGermany IT-RECHT KANZLEI < 2.4 - Unauthenticated RCE via Predictable API Token

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9EPSS 0.81%Percentil 55.8%

Versiones y rangos reportados

[
  {
    "vendor": "Unknown",
    "product": "wpShopGermany IT-RECHT KANZLEI",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "1.6",
        "lessThan": "2.4"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2650CVE-2026-88804

SUSE · Rancher

Vigilar · Prioridad 24/100

NVD: CVE-2026-88804 CVE.org: CVE-2026-88804

Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.6EPSS 0.54%Percentil 43.6%

Versiones y rangos reportados

[
  {
    "vendor": "SUSE",
    "product": "Rancher",
    "packageName": "Rancher",
    "repo": "https://github.com/rancher/rancher/",
    "versions": [
      {
        "status": "affected",
        "version": "2.15.0",
        "lessThan": "2.15.2",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "2.14.0",
        "lessThan": "2.14.6",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "2.13.0",
        "lessThan": "2.13.10",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "2.12.0",
        "lessThan": "2.12.14",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "2.11.0se",
        "lessThan": "2.11.18",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2651CVE-2026-88854

OrdaSoft.com · OrdaSoft Joomla Gallery free extension for Joomla

Vigilar · Prioridad 24/100

NVD: CVE-2026-88854 CVE.org: CVE-2026-88854

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.39%Percentil 30.6%

Versiones y rangos reportados

[
  {
    "defaultStatus": "unaffected",
    "packageName": "com_osgallery_light",
    "product": "OrdaSoft Joomla Gallery free extension for Joomla",
    "vendor": "OrdaSoft.com",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0-6.2.6"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "com_osgallery",
    "product": "OrdaSoft Joomla Gallery extension for Joomla",
    "vendor": "OrdaSoft.com",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0-6.2.6"
      }
    ]
  }
]

2652CVE-2026-88856

OrdaSoft.com · OrdaSoft Joomla Gallery free extension for Joomla

Vigilar · Prioridad 24/100

NVD: CVE-2026-88856 CVE.org: CVE-2026-88856

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.4EPSS 0.67%Percentil 50.4%

Versiones y rangos reportados

[
  {
    "defaultStatus": "unaffected",
    "packageName": "com_osgallery_light",
    "product": "OrdaSoft Joomla Gallery free extension for Joomla",
    "vendor": "OrdaSoft.com",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0-6.2.6"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "com_osgallery",
    "product": "OrdaSoft Joomla Gallery extension for Joomla",
    "vendor": "OrdaSoft.com",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0-6.2.6"
      }
    ]
  }
]

2653CVE-2026-88857

OrdaSoft.com · OrdaSoft Joomla Gallery free extension for Joomla

Vigilar · Prioridad 24/100

NVD: CVE-2026-88857 CVE.org: CVE-2026-88857

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.4EPSS 0.64%Percentil 49.3%

Versiones y rangos reportados

[
  {
    "defaultStatus": "unaffected",
    "packageName": "com_osgallery_light",
    "product": "OrdaSoft Joomla Gallery free extension for Joomla",
    "vendor": "OrdaSoft.com",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0-6.2.6"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "com_osgallery",
    "product": "OrdaSoft Joomla Gallery extension for Joomla",
    "vendor": "OrdaSoft.com",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0-6.2.6"
      }
    ]
  }
]

2654CVE-2026-88920

apache · wss4j

Vigilar · Prioridad 24/100

NVD: CVE-2026-88920 CVE.org: CVE-2026-88920

An authentication bypass in the DOM security processor in Apache WSS4J allows unauthenticated remote attackers to forge authenticated SOAP messages via a crafted unsigned SAML sender-vouches assertion

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.57%Percentil 45.6%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:apache:wss4j:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "2.4.4",
            "matchCriteriaId": "A3409718-5467-407D-9B51-14E58B6D2F68"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:apache:wss4j:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "3.0.0",
            "versionEndExcluding": "3.0.6",
            "matchCriteriaId": "31AFF243-7BCE-44BC-85C5-6FE257642C13"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:apache:wss4j:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "4.0.0",
            "versionEndExcluding": "4.0.2",
            "matchCriteriaId": "20E76C98-444D-4DB5-91E0-90E84C196158"
          }
        ]
      }
    ]
  }
]

2655CVE-2026-88952

team-alembic · ash_authentication

Vigilar · Prioridad 24/100

NVD: CVE-2026-88952 CVE.org: CVE-2026-88952

OAuth2 sign-in attached to an existing account without an email comparison in AshAuthentication

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.75%Percentil 53.6%

Versiones y rangos reportados

[
  {
    "collectionURL": "https://repo.hex.pm",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.AshAuthentication.Strategy.OAuth2.UserResolver'",
      "'Elixir.AshAuthentication.Strategy.OAuth2.SignInPreparation'",
      "'Elixir.AshAuthentication.Strategy.OAuth2.IdentityChange'",
      "'Elixir.AshAuthentication.Strategy.DynamicOidc.IdentityChange'"
    ],
    "packageName": "ash_authentication",
    "packageURL": "pkg:hex/ash_authentication",
    "product": "ash_authentication",
    "programFiles": [
      "lib/ash_authentication/strategies/oauth2/user_resolver.ex",
      "lib/ash_authentication/strategies/oauth2/sign_in_preparation.ex",
      "lib/ash_authentication/strategies/oauth2/identity_change.ex",
      "lib/ash_authentication/strategies/dynamic_oidc/identity_change.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.AshAuthentication.Strategy.OAuth2.UserResolver':resolve/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Strategy.OAuth2.UserResolver':email_trusted?/2"
      },
      {
        "name": "'Elixir.AshAuthentication.Strategy.OAuth2.SignInPreparation':prepare/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Strategy.OAuth2.IdentityChange':change/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Strategy.DynamicOidc.IdentityChange':change/3"
      }
    ],
    "repo": "https://github.com/team-alembic/ash_authentication",
    "vendor": "team-alembic",
    "versions": [
      {
        "lessThan": "4.15.0",
        "status": "affected",
        "version": "4.14.0",
        "versionType": "semver"
      },
      {
        "lessThan": "5.0.0-rc.14",
        "status": "affected",
        "version": "5.0.0-rc.10",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.AshAuthentication.Strategy.OAuth2.UserResolver'",
      "'Elixir.AshAuthentication.Strategy.OAuth2.SignInPreparation'",
      "'Elixir.AshAuthentication.Strategy.OAuth2.IdentityChange'",
      "'Elixir.AshAuthentication.Strategy.DynamicOidc.IdentityChange'"
    ],
    "packageName": "team-alembic/ash_authentication",
    "packageURL": "pkg:github/team-alembic/ash_authentication",
    "product": "ash_authentication",
    "programFiles": [
      "lib/ash_authentication/strategies/oauth2/user_resolver.ex",
      "lib/ash_authentication/strategies/oauth2/sign_in_preparation.ex",
      "lib/ash_authentication/strategies/oauth2/identity_change.ex",
      "lib/ash_authentication/strategies/dynamic_oidc/identity_change.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.AshAuthentication.Strategy.OAuth2.UserResolver':resolve/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Strategy.OAuth2.UserResolver':email_trusted?/2"
      },
      {
        "name": "'Elixir.AshAuthentication.Strategy.OAuth2.SignInPreparation':prepare/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Strategy.OAuth2.IdentityChange':change/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Strategy.DynamicOidc.IdentityChange':change/3"
      }
    ],
    "repo": "https://github.com/team-alembic/ash_authentication",
    "vendor": "team-alembic",
    "versions": [
      {
        "changes": [
          {
            "at": "738bf9f32f2aa0d1bb92ce9ca5c2476cb5710459",
            "status": "unaffected"
          },
          {
            "at": "2bd630eef8b7c8ae1e90e8fd43ba12fbc7e256ba",
            "status": "unaffected"
          }
        ],
        "lessThan": "*",
        "status": "affected",
        "version": "64530644f9b37ebb76ca14aeb83a77597a0034b7",
        "versionType": "git"
      },
      {
        "changes": [
          {
            "at": "738bf9f32f2aa0d1bb92ce9ca5c2476cb5710459",
            "status": "unaffected"
          },
          {
            "at": "2bd630eef8b7c8ae1e90e8fd43ba12fbc7e256ba",
            "status": "unaffected"
          }
        ],
        "lessThan": "*",
        "status": "affected",
        "version": "42edcd8ebb13fafbb168f12591d7518ce0611fec",
        "versionType": "git"
      }
    ]
  }
]

2656CVE-2026-89022

bookstackapp · bookstack

Vigilar · Prioridad 24/100

NVD: CVE-2026-89022 CVE.org: CVE-2026-89022

BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusion

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.46%Percentil 38.4%

Versiones y rangos reportados

[
  {
    "defaultStatus": "unaffected",
    "vendor": "bookstackapp",
    "product": "bookstack",
    "packageURL": "pkg:github/bookstackapp/bookstack",
    "repo": "https://github.com/bookstackapp/bookstack",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThan": "26.05.5"
      }
    ]
  }
]

2657CVE-2026-89026

Issabel Foundation · Issabel Framework

Vigilar · Prioridad 24/100

NVD: CVE-2026-89026 CVE.org: CVE-2026-89026

Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.69%Percentil 51.2%

Versiones y rangos reportados

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Issabel Foundation",
    "product": "Issabel Framework",
    "packageURL": "pkg:github/IssabelFoundation/framework",
    "repo": "https://github.com/IssabelFoundation/framework",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "git",
        "lessThan": "b97dbaf0b71c1c36f841e672b664afbeb02773bd"
      }
    ]
  }
]

2658CVE-2026-89040

Tencent · Mass Service Engine in Cluster (MSEC)

Vigilar · Prioridad 24/100

NVD: CVE-2026-89040 CVE.org: CVE-2026-89040

Tencent Mass Service Engine in Cluster (MSEC) path traversal

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 1.14%Percentil 65.8%

Versiones y rangos reportados

[
  {
    "vendor": "Tencent",
    "product": "Mass Service Engine in Cluster (MSEC)",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "*",
        "versionType": "custom"
      }
    ]
  }
]

2659CVE-2026-89055

ivole · Customer Reviews for WooCommerce

Vigilar · Prioridad 24/100

NVD: CVE-2026-89055 CVE.org: CVE-2026-89055

Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.39%Percentil 30.5%

Versiones y rangos reportados

[
  {
    "vendor": "ivole",
    "product": "Customer Reviews for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "5.120.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

2660CVE-2026-89078

gitlab · gitlab

Vigilar · Prioridad 24/100

NVD: CVE-2026-89078 CVE.org: CVE-2026-89078

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authentica

CVSS crítico ≥ 9
publicada hace ≤ 30 días
sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.44%Percentil 36.3%

Versiones y rangos reportados

[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding": "19.2.0",
            "versionEndExcluding": "19.2.7",
            "matchCriteriaId": "2E337204-7AC0-4D9A-ADE3-D435F0E8F4CB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding": "19.2.0",
            "versionEndExcluding": "19.2.7",
            "matchCriteriaId": "501CC95C-E50C-47C8-A7E0-68B106B22291"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding": "19.3.0",
            "versionEndExcluding": "19.3.3",
            "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding": "19.3.0",
            "versionEndExcluding": "19.3.3",
            "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
            "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44"
          }
        ]
      }
    ]
  }
]

Cómo calculamos la prioridad

La señal principal es qué tan reciente es la explotación confirmada. Ahora: entró a CISA KEV hace ≤ 30 días, o hace ≤ 90 días y está ligada a ransomware o tiene percentil EPSS ≥ 95. Esta semana: KEV del último año; KEV de cualquier edad con ransomware y percentil EPSS ≥ 95; o CVSS ≥ 9 con percentil EPSS ≥ 80 aunque no esté en KEV. Vigilar: KEV más antiguos sin esas señales y críticas sin evidencia de explotación. Baja: resto. Bases 70 / 45 / 20 / 0; sumamos ransomware +8, percentil ≥ 95 +5 o ≥ 80 +3, CVSS ≥ 9 +4 o ≥ 7 +2 y hasta +10 por recencia en KEV; las bandas no se traslapan (máximo 97 / 75 / 44 / 19). Los plazos CISA vencidos no suben la prioridad: obligan a agencias federales de EE. UU., no a todos; un plazo en los próximos 14 días sí se muestra como razón. No es una probabilidad ni una evaluación de tu entorno. Los datos faltantes limitan la confianza; no equivalen a riesgo cero.