Saltar al contenido principal

Inteligencia pública · Sin registro

Qué se explota. Qué atender primero.

Prioriza con evidencia de explotación, probabilidad e impacto. No es un inventario completo ni confirma que tu equipo esté afectado: verifica producto y versión.

Explotándose (CISA KEV)

1,745

CVEs con explotación observada

CISA KEV · actualizado hace 12 h

Incorporaciones a KEV

+6

esta semana / +35 en 30 días

CISA KEV · actualizado hace 12 h

Ligadas a ransomware

361

CISA KEV · actualizado hace 12 h

Críticas nuevas (7 días)

446

10 con EPSS alto de 353 con EPSS publicado

NVD · actualizado hace 1 h

CVE.org · actualizado hace 1 h

FIRST EPSS · actualizado hace 12 h

Semana = últimos 7 días UTC, incluido hoy. KEV registra explotación observada, no ataques en curso ni su cantidad. EPSS estima probabilidad a 30 días; alto = percentil ≥ 80. Corte: 15/10/2026, 12:26:07 p.m. UTC.

Prioriza ahora

Hasta 10 CVEs de mayor prioridad para los filtros elegidos. Confirma exposición y aplica mitigaciones o parches del fabricante.

01CVE-2026-104935

Ivanti · Connect Secure

Ahora · Prioridad 87/100

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

  • en CISA KEV (explotación confirmada) hace 2 días
  • EPSS en percentil ≥ 95
  • plazo CISA en 1 día

CVSS 8.6EPSS 25.98%Percentil 98.0%

KEV: 2026-10-13 · Ransomware: desconocido · Plazo CISA: 2026-10-16

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "25.1.0.0",
            "versionEndExcluding": "25.1.1.2",
            "matchCriteriaId": "51F9201D-EF2F-4750-846E-912827761A9F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "25.1.2.0",
            "versionEndExcluding": "25.1.3.0",
            "matchCriteriaId": "822E7CEB-9AB2-4B0E-B87A-B9718503466A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2:*:*:*:*:*:*",
            "matchCriteriaId": "56FEC223-8FF7-4A05-9577-CFFE0AA6526C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.1:*:*:*:*:*:*",
            "matchCriteriaId": "5569D323-6ADF-4B16-822D-FBA6760356C3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.2:*:*:*:*:*:*",
            "matchCriteriaId": "FF4D400F-49DA-4C5F-8F63-5A15738360AE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.3:*:*:*:*:*:*",
            "matchCriteriaId": "9CA7EF35-D0BC-4714-A38A-91660BE1BA55"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.4:*:*:*:*:*:*",
            "matchCriteriaId": "F22EC396-A447-4175-8A30-C8DC10ACFFE9"
          }
        ]
      }
    ]
  }
]

02CVE-2026-76460

Cisco · Identity Services Engine

Ahora · Prioridad 86/100

Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

  • en CISA KEV (explotación confirmada) hace 29 días
  • EPSS en percentil ≥ 95
  • CVSS crítico ≥ 9

CVSS 10EPSS 14.03%Percentil 96.5%

KEV: 2026-09-16 · Ransomware: desconocido · Plazo CISA: 2026-09-19

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "7A789B44-7E6C-4FE9-BD40-702A871AB8AC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "93920663-445E-4456-A905-81CEC6CA1833"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "DF9CCBFA-0004-48F7-B142-6FDD4B3E1081"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "C91717BE-76EF-410C-970D-01C5FDC52A0B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "33DA5BB8-4CFE-44BD-9CEB-BC26577E8477"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "D3AEFA85-66B5-4145-A4AD-96D1FF86B46D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "7A6A0697-6A9E-48EF-82D8-36C75E0CDFDC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "E939B65A-7912-4C36-8799-03A1526D7BD3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "833B438F-0869-4C0D-9952-750C00702E8D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "E8B2588D-01F9-450B-B2E3-ADC4125E354E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "E41016C0-19E6-4BCC-A8DD-F6C9A2B0003E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "654E946A-07C5-4036-BC54-85EF42B808DD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "7932D5D5-83E1-4BEF-845A-D0783D4BB750"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "1B818846-4A6E-4256-B344-281E8C786C43"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "1EEC9040-9BD3-43D0-A33E-1EBD941EB65F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "A44858A2-922A-425A-8B38-0C47DB911A3C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "53484A32-757B-42F8-B655-554C34222060"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "0CCAC61F-C273-49B3-A631-31D3AE3EB148"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "B452B4F0-8510-475E-9AE8-B48FABB4D7D3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "5733512D-12B5-4098-AF90-9D68217FAC27"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "4ED98020-7BAF-4E5E-8B7B-22537200C283"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "4C6839DC-F3A2-4133-BF60-2E678E6DD4A4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "43F3A55D-D4FC-4D93-9513-94B64B21A2B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "F0F60A00-E952-400A-B553-BE96E7FF746F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "FF8B81A6-BF44-4E5F-B167-39F61DDCA026"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "56E0F0EC-3E66-4866-89F5-89B331F3F517"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "2E3E8937-2859-4A2A-91C0-05F674EF0466"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "D4B14684-EB9E-405B-85FA-B62E57CB292C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "22B752D1-9E8F-4FB7-8EEB-F9234492372B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "85A1CC7D-FE54-4AC0-B98F-972C4B1F3189"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "D23905E0-E525-49B1-8E5F-4EB42D186768"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "74509498-38EF-4345-9583-CEF5C26CA1D8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "CD05FF93-7B8C-4283-9DB7-E03FE98FAADF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "0F9B6A8E-E773-44A3-9266-878F0C58EB41"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "D3727619-E0CA-4CA9-BE35-0C732BCF1741"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "2CFB7565-3930-409C-B5DB-CE77E6ED7C42"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "A388D916-D6A1-4D3A-A48A-A150F387B755"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "2610FD35-BC4B-41B7-9C92-E6E5264FEE54"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "3FEE4377-B238-4442-9892-28CECFB2319E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "6598563B-7E32-43FB-96A7-88C53E4CE226"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "719C8E82-269D-4F21-B2B4-4CD3033A17F9"
          }
        ]
      }
    ]
  },
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "006E0D77-534C-447F-8E97-EC0AB906D978"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "AC07A742-D194-425C-945C-3977E96B61B8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "00D4B446-EDCE-41DC-A03B-97D8A371B0D9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "BE3B2985-AC34-4628-8564-517C48B9F475"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "97787372-9A0D-4916-A7A2-19237B84419F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "2E2D9D7C-A36E-489D-A2E1-ACE9E9C399BD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "3ABA57DA-78C9-489B-88E5-6E5275E53388"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "2ABFB0CE-60CF-4969-A91E-186F457C8014"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "B8CF7EF0-FBAA-47C7-8386-F67264CA8D0E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "5F08ACD7-2867-428A-966C-6509283FCA10"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "B365970F-9239-45F8-80C6-DA426FCA2E32"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "5A66142F-712F-4EFA-9FC4-E499D3015DD2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "50D8B7DD-14A8-4C67-8B32-E1F9C7D9C01E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "CB65DFF8-33D8-4840-8A63-7C4797FF0B51"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "9CAAF565-E1CF-4002-B91C-290ECAB2F16A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "890FDA62-DED9-401B-9D44-26F3624118CD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "604079BA-78F5-4D20-AF27-E7A9A899DA0C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "25344C6F-8EB6-4709-A51B-DCA26AA885E3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "51DE5AD0-5DFA-460D-B22D-0F5E367A9A28"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "683F2E87-9759-4A98-B7C9-489E74837D59"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "22BF8687-84E4-4609-8100-FD2408DF3247"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "19F88640-BC3E-42D2-ADDC-59114974103C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "40A94055-EF01-4799-813D-7BFFDD13C685"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "3CA3315D-8A45-43F4-A0F0-094D325F285B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "B3736136-9FD8-4B12-B119-EA15201224D9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId": "FB15AE6D-F4EF-40AD-A88E-D22612AEF2A4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId": "25B8E5EB-393A-40E8-9A0D-465ECCC2A4B8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "654ED77E-22D3-4E76-9E6D-B1581F5982F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "A0648EE9-F042-479F-9AAB-C6B5DBC46511"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "83F3BA58-4F38-41C8-956F-38A2F44EECE4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "6C30FA1D-91E2-48C5-B181-A88FDF668278"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "768215B1-80B7-40FF-8772-BA4C0B3913F5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId": "40239DA8-43B6-466B-85B0-6D644D7027D1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId": "9118B7ED-E678-47C3-9D17-F522D9362B2F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId": "C2ED3257-CB9D-4FD5-A482-3648CF292128"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId": "CC0525FD-C4D7-4B48-BF35-1791391AB148"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId": "68C96F6B-51EE-4D03-9598-CBFD16DA22EF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId": "62F25185-D19E-4EC5-8A68-7AB669B76E90"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId": "C457D2EC-FB63-49B7-A90E-CE67ED763BAE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId": "6566330F-A048-44A1-9821-7A5844C82CEC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId": "1154F196-2CB3-4AC2-BE00-11A8942EA999"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId": "7E30ECF6-5B1D-4280-AA02-123153E68F28"
          }
        ]
      }
    ]
  }
]

03CVE-2026-93616

Check Point · Multiple Products

Ahora · Prioridad 86/100

Check Point Multiple Products Path Traversal Vulnerability

  • en CISA KEV (explotación confirmada) hace 23 días
  • EPSS en percentil ≥ 95
  • CVSS crítico ≥ 9

CVSS 9.8EPSS 19.65%Percentil 97.4%

KEV: 2026-09-22 · Ransomware: desconocido · Plazo CISA: 2026-09-25

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "r80",
            "versionEndExcluding": "r81.10",
            "matchCriteriaId": "46543FA9-C054-4F64-B6A9-37191C09C8BC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "A2428B4E-3754-44B5-9C21-AE9F7746A440"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_106:*:*:*:*:*:*",
            "matchCriteriaId": "BA42413E-A16A-4D83-BD08-C44D2272B352"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "B55EFDA0-B970-4EB0-A1B8-FE10E3FF1D39"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_109:*:*:*:*:*:*",
            "matchCriteriaId": "8A5711F6-13C5-4C50-ADE2-8E9465BEABCB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_110:*:*:*:*:*:*",
            "matchCriteriaId": "8F71DADF-125C-458F-81E2-A572527C10C6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "2C1FE1CC-4FA9-420A-8F7A-E180027F1A33"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_128:*:*:*:*:*:*",
            "matchCriteriaId": "C38E5B49-3074-48F3-A623-7C86C27204C6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_129:*:*:*:*:*:*",
            "matchCriteriaId": "CD9E8386-0220-4A94-87FD-D9E663983AFA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_130:*:*:*:*:*:*",
            "matchCriteriaId": "A5ACC58D-34A8-4D04-98C6-8DFF9465DC60"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_131:*:*:*:*:*:*",
            "matchCriteriaId": "78074569-7B81-440B-BEDA-5F1B6002CA57"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_132:*:*:*:*:*:*",
            "matchCriteriaId": "CD9E6258-DF53-4E47-9DE5-109F3E5F5A71"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_135:*:*:*:*:*:*",
            "matchCriteriaId": "BB44CD33-CDC4-4D51-A897-2EF8E108546B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_139:*:*:*:*:*:*",
            "matchCriteriaId": "8DBDF8B8-5A70-427B-91F1-7678D3CC281C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "964C5CDC-D605-4A4F-B1E8-92BE59EDA34A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "B6A031A8-D79B-461C-A613-C9D922709A8C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_150:*:*:*:*:*:*",
            "matchCriteriaId": "4DACDF4E-DDDF-4C32-9E36-8F41370BDBBA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_152:*:*:*:*:*:*",
            "matchCriteriaId": "C25851DF-54C5-40EE-BCFF-3E65EBBB1564"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_156:*:*:*:*:*:*",
            "matchCriteriaId": "B029BBE5-EAEC-4E10-A7FE-45ABB458D85B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "75529BA5-943C-46D6-9C33-18D1EEB8063A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_165:*:*:*:*:*:*",
            "matchCriteriaId": "F08CD952-5857-4C7D-8982-389A9DCC8309"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_169:*:*:*:*:*:*",
            "matchCriteriaId": "75BBDB88-78C3-47E1-848C-B8BAA7B284E0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_170:*:*:*:*:*:*",
            "matchCriteriaId": "AB9581B4-B2FA-4946-9674-391FE35E5B67"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_171:*:*:*:*:*:*",
            "matchCriteriaId": "5E34C44D-5F7A-4260-9B48-D333932F9A61"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_172:*:*:*:*:*:*",
            "matchCriteriaId": "5C9D465A-61AF-4921-B814-9917F7ADE4CA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_173:*:*:*:*:*:*",
            "matchCriteriaId": "4B3D629E-119E-46DE-ACF0-F939E0E44B32"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_174:*:*:*:*:*:*",
            "matchCriteriaId": "F55AD3DF-EE8A-421D-B430-77ABC7670AB4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_177:*:*:*:*:*:*",
            "matchCriteriaId": "AB895616-A0B0-4CF8-A915-AEFBFADECF75"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_181:*:*:*:*:*:*",
            "matchCriteriaId": "11BD9477-949D-436C-A724-7C0DD5755C1A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_183:*:*:*:*:*:*",
            "matchCriteriaId": "20A8D3F6-45C7-4985-8EF2-399274E6466A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_187:*:*:*:*:*:*",
            "matchCriteriaId": "043058AE-6D16-494F-8489-B9F87F0CBDD9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_190:*:*:*:*:*:*",
            "matchCriteriaId": "CFC597DF-66DC-46E7-A31A-82D253A70E7F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_22:*:*:*:*:*:*",
            "matchCriteriaId": "8793BA9A-096E-4E58-A73C-E60C6E010019"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_30:*:*:*:*:*:*",
            "matchCriteriaId": "993ECDA4-9028-46DB-853E-AF07153A6F94"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "7A4F9499-F5B5-4CA3-BED3-F2909AEB7F7C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "4809F58C-906A-4DFB-8520-EC92A4A6FE43"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "3EDB5D74-5C06-472B-A442-D9940B7885D0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_55:*:*:*:*:*:*",
            "matchCriteriaId": "CEB4451F-3296-49E8-B171-BD06167C16D0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_61:*:*:*:*:*:*",
            "matchCriteriaId": "FA3DEADA-8C44-4F7D-BE4D-004C3B97950C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_66:*:*:*:*:*:*",
            "matchCriteriaId": "FFFA1CC6-612A-4701-BFE1-B7AC97B2921F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_75:*:*:*:*:*:*",
            "matchCriteriaId": "1778DF16-6C1E-4228-ACF8-EC94EF0BC884"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_78:*:*:*:*:*:*",
            "matchCriteriaId": "EABB856E-E059-493F-B359-ED9FE39E2637"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "AE129711-6F49-4A3E-A0A1-F64A7655E18F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_81:*:*:*:*:*:*",
            "matchCriteriaId": "EAC196AC-EF63-43F9-BE27-11807E4200DC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_82:*:*:*:*:*:*",
            "matchCriteriaId": "527ED156-030A-4785-811A-9A1D226B9F76"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_85:*:*:*:*:*:*",
            "matchCriteriaId": "C99694F6-A7D0-47A4-BC54-938BC81F7D54"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_87:*:*:*:*:*:*",
            "matchCriteriaId": "4410B9E8-BB15-4A3C-98E2-CF6E259FF74E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_9:*:*:*:*:*:*",
            "matchCriteriaId": "68864C91-5D68-46A3-A671-61EBA3D86762"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_93:*:*:*:*:*:*",
            "matchCriteriaId": "336F50C0-B258-406F-9C56-A20C1ADF9F36"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_94:*:*:*:*:*:*",
            "matchCriteriaId": "5CFFD6BE-1679-4462-A20F-8AF76E3566CD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_95:*:*:*:*:*:*",
            "matchCriteriaId": "FBBBCC15-698D-4B75-8CC6-212870CA29AC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "60E5A48C-4ABB-46DB-BA75-132AFB408BC8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "BD16B955-141C-4F13-A9BC-6CCCD96248B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_101:*:*:*:*:*:*",
            "matchCriteriaId": "F70DA99D-131C-46CC-B582-CB9419DB1B64"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "B06457A0-ED12-4412-BB1D-1D24E0C751EA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_105:*:*:*:*:*:*",
            "matchCriteriaId": "FD7D44D8-C2D1-46C4-B9E4-29664BCFEAB4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_111:*:*:*:*:*:*",
            "matchCriteriaId": "3A7EF92D-B4CC-4868-9026-8F5DA0D14DFC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "4347D905-4E57-4D64-9B57-C406A70DC0C1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_115:*:*:*:*:*:*",
            "matchCriteriaId": "12E1E158-790D-40D4-81FF-622307C4524E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "01DA6EEA-746F-4EB2-81C5-F7C064519D44"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_119:*:*:*:*:*:*",
            "matchCriteriaId": "AD575960-0B66-48F9-BC9D-6F7DAEF0BCBC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_120:*:*:*:*:*:*",
            "matchCriteriaId": "776DF4D6-9CC1-4BC2-93D0-9DE2405716EA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "C0AABCDA-255E-4096-8DEF-483E0373E7F7"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "236CB75E-705A-46B3-A531-29E343AA024A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_127:*:*:*:*:*:*",
            "matchCriteriaId": "D1A5645A-D22D-4B5B-86FA-29642111FEDF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "B90AA06D-C905-4811-A93A-44F787563FB0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "8A1BC954-296C-4A94-847D-479825CDA84C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_146:*:*:*:*:*:*",
            "matchCriteriaId": "BADA45FE-319D-421F-B4B6-D221D78B69CC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "131ADAE9-9514-4C12-BE4D-312EB16F2E24"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_161:*:*:*:*:*:*",
            "matchCriteriaId": "9D912106-DC05-42B9-914B-A559ED20CAB6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_166:*:*:*:*:*:*",
            "matchCriteriaId": "31D18E59-D406-4263-83B1-F9267667AE1E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "CBA6E4FC-BDCC-425F-9D69-E9183548893A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_26:*:*:*:*:*:*",
            "matchCriteriaId": "6DF70422-7897-49CC-8874-A96D4CA64E11"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "F3240200-0517-43FD-BED2-D8AF844BF6E6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "BE6FBF0A-195F-4E52-9FBF-CD9A71EF3A36"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "57B969D9-DCC0-4B06-818F-CE2521C4C0C0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "CA897E69-E1CE-45A1-A0DB-A7BF444484F3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_53:*:*:*:*:*:*",
            "matchCriteriaId": "A13B8B4D-D746-432A-8833-BDF3A5A13CB4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_54:*:*:*:*:*:*",
            "matchCriteriaId": "CF0A7585-591D-4FA1-941E-55FB0207C207"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_65:*:*:*:*:*:*",
            "matchCriteriaId": "2A5B10FC-D9B5-4BB2-AD82-0B9AFB2AD0DE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_70:*:*:*:*:*:*",
            "matchCriteriaId": "ECE1DDA0-9A0A-44D5-919E-24810E7131B0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_76:*:*:*:*:*:*",
            "matchCriteriaId": "491F74B1-998F-459A-A27D-EB01597C9B01"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "A31115EC-8018-4EF3-B5D0-0F1EA2392680"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_8:*:*:*:*:*:*",
            "matchCriteriaId": "E415D02C-B30A-4210-8F14-47ABF46D4E64"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_84:*:*:*:*:*:*",
            "matchCriteriaId": "27AED864-AC5B-4FCF-9FD7-6E0D49569BB2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_89:*:*:*:*:*:*",
            "matchCriteriaId": "ABF3E632-8D50-4373-9576-0E710511D21B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_90:*:*:*:*:*:*",
            "matchCriteriaId": "C6229824-D7A7-439E-9FDD-95F753061410"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_92:*:*:*:*:*:*",
            "matchCriteriaId": "B218B25D-7722-435C-AA22-B5411E786277"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_96:*:*:*:*:*:*",
            "matchCriteriaId": "7A49ABD5-57B9-4E06-AFFE-8A1269BB16C8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_98:*:*:*:*:*:*",
            "matchCriteriaId": "3BFA1E0F-A214-4150-A0BD-44B5424A667E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_99:*:*:*:*:*:*",
            "matchCriteriaId": "265683A2-DA16-4CDC-AE9D-CE14BAB28A79"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:-:*:*:*:*:*:*",
            "matchCriteriaId": "2D16C37E-3064-4E15-8590-3B3020E4FF7E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "C01C66D8-5B48-4255-8246-9301EEA863DA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "22A0D74F-5216-40D9-B07C-8789A8E2D328"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "F2C763B7-B4BD-4915-A33B-9675DC2A1EA5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "1844D63C-499D-4185-B1B5-89FBE609F8FA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_12:*:*:*:*:*:*",
            "matchCriteriaId": "EC227225-ECF6-4025-B288-992ADE9B6B4B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "C7BF37CC-BE7A-4DDD-B5DA-8216B6FE9D44"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "7FD699CE-41C5-4A8D-BE52-35CBF1F16C96"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "673F8F1B-E64E-44D1-A793-F2B4ED56DDBD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_18:*:*:*:*:*:*",
            "matchCriteriaId": "927823EC-B157-4B5C-A4A3-F9D249C88E2C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "0DBDDAA3-3CA1-4490-8D43-C8C5C5188A6E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_25:*:*:*:*:*:*",
            "matchCriteriaId": "73AEA72B-8E44-4839-8651-5076EBC609B1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_33:*:*:*:*:*:*",
            "matchCriteriaId": "B11AA664-F3C8-44A6-AD11-14AF6AFAD2E2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_34:*:*:*:*:*:*",
            "matchCriteriaId": "0D511D85-A534-49A5-A9AE-88BC624311B6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "B0A2B178-FC15-4D76-9075-D605F87F350D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_39:*:*:*:*:*:*",
            "matchCriteriaId": "1360EBA1-B59B-472E-9019-9EB560A05699"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "F1301887-F38A-4FE6-9614-1FCF8FDE681C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "74DA6820-BE56-4115-A058-45CFF400DAA6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "54ECA176-C752-42C6-A9B2-CF408D8C580E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_60:*:*:*:*:*:*",
            "matchCriteriaId": "D2E35CA7-FED1-44E9-B144-1B51A2D7FB8B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_73:*:*:*:*:*:*",
            "matchCriteriaId": "DBA345D3-0FE7-4BE9-BEBB-96CD4055E546"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_91:*:*:*:*:*:*",
            "matchCriteriaId": "E2D4A292-EE3B-4A3A-9B16-E03626F82832"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "9381DBDF-5CE2-454C-BE04-859C9A197C90"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "F7442AF7-C511-4A15-AA85-FCB741F6A733"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "B9E02250-00AF-4684-A9A0-E9E4032DEA66"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "AC444B54-CFE5-4B7C-A885-9DE87394B132"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_40:*:*:*:*:*:*",
            "matchCriteriaId": "9B722ECE-8995-4D34-AC3B-3CEAF1FDAA08"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "E8D09FD6-5DC3-4C3A-8598-E91F86C5F657"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_6:*:*:*:*:*:*",
            "matchCriteriaId": "27057734-9870-4BA0-9A29-DB03FDFE485F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "E29151E7-2021-4553-8F70-AAE4AAB10188"
          }
        ]
      }
    ]
  },
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "r80",
            "versionEndExcluding": "r81.10",
            "matchCriteriaId": "B7EA18CB-4869-48C3-A9BC-0B0A6580FF1A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "E3EFE5C0-04CD-4B17-AD14-5035C2969047"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_106:*:*:*:*:*:*",
            "matchCriteriaId": "59FBDFE0-B5D7-44B5-B8A4-7ED87D8D1C13"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "BB2A0A91-CB75-455E-AA39-A4A79C8B574C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_109:*:*:*:*:*:*",
            "matchCriteriaId": "A8EFFC09-DF62-41C5-A719-30CC9D323F96"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_110:*:*:*:*:*:*",
            "matchCriteriaId": "C330AA5D-155B-4B29-968F-3A2B95EE7FAC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "653CF951-198E-4378-82E6-145052CF388A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_128:*:*:*:*:*:*",
            "matchCriteriaId": "8819E6BD-A6E0-4BC5-8BA8-A227266120E6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_129:*:*:*:*:*:*",
            "matchCriteriaId": "B5A0A754-1D52-4C50-80F3-CEB12F67E5AB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_130:*:*:*:*:*:*",
            "matchCriteriaId": "7444A711-160A-4B65-955A-509C0A169A6D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_131:*:*:*:*:*:*",
            "matchCriteriaId": "D11061E3-C47D-4B72-9226-960965DF73F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_132:*:*:*:*:*:*",
            "matchCriteriaId": "4DD733B2-3D1B-4EDF-B6E3-1F04089CDFF5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_135:*:*:*:*:*:*",
            "matchCriteriaId": "0FDDB709-B86E-4EF0-BFFF-E866F5AC13BE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_139:*:*:*:*:*:*",
            "matchCriteriaId": "3C2F9CF0-6684-4353-A4A1-7D117CF8032D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "EE2DD8DD-3060-4029-AE0E-861DE3EF6C3F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "F19DC5F4-4F3D-47E9-9EE1-71EC0FDF2D17"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_150:*:*:*:*:*:*",
            "matchCriteriaId": "76101CB6-BD1F-4E0D-BB88-9CC7EA3E84C8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_152:*:*:*:*:*:*",
            "matchCriteriaId": "A7628981-6822-44C0-82AC-43BE06DEA3E3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_156:*:*:*:*:*:*",
            "matchCriteriaId": "BBB95805-9CCC-4220-B4C1-BF5535968998"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "7E441395-16C7-4AFD-BCE5-B7CCED66AEC3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_165:*:*:*:*:*:*",
            "matchCriteriaId": "93B0F1EF-1EA1-45A3-ABE1-0BA9E29E8820"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_169:*:*:*:*:*:*",
            "matchCriteriaId": "41F7E1A6-F1FA-409A-A8BF-40DDB5EB00FF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_170:*:*:*:*:*:*",
            "matchCriteriaId": "D3CC56EB-2456-485F-B7DF-B3F25FB99554"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_171:*:*:*:*:*:*",
            "matchCriteriaId": "5EEC17E9-CEF9-4FB2-B1D9-43728013D096"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_172:*:*:*:*:*:*",
            "matchCriteriaId": "727BE9AD-AF6C-4159-9932-496480C8B436"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_173:*:*:*:*:*:*",
            "matchCriteriaId": "A0B43191-7C2E-46EE-825C-05000A7FBFEC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_174:*:*:*:*:*:*",
            "matchCriteriaId": "40EBD18C-3A36-43DA-B045-631CC7517F25"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_177:*:*:*:*:*:*",
            "matchCriteriaId": "8891CA25-BB20-4A71-90CA-B94422B71EA5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_181:*:*:*:*:*:*",
            "matchCriteriaId": "40776587-1731-4579-A8C6-619DB6DDD3F2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_183:*:*:*:*:*:*",
            "matchCriteriaId": "268462D2-87BD-4144-9255-163DB1711917"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_187:*:*:*:*:*:*",
            "matchCriteriaId": "858E5667-5661-4DC9-9017-498F0C107699"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_190:*:*:*:*:*:*",
            "matchCriteriaId": "DD908FC8-7991-41F9-87C1-45DA624B24B5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_22:*:*:*:*:*:*",
            "matchCriteriaId": "39876606-2D2B-49FC-9A7F-9A564418EB8C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_30:*:*:*:*:*:*",
            "matchCriteriaId": "A3F582E0-A364-4B88-9C06-3796707745FD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "8490D7B3-4553-457F-A89C-136911626C70"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "59CA7C8E-63D3-48D4-AA6F-DEB270976A5E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "D6E1781C-58C6-4336-9354-40166B88B6C5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_55:*:*:*:*:*:*",
            "matchCriteriaId": "7A05B5FE-A04D-4A75-A1A6-89BB2A00A0E1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_61:*:*:*:*:*:*",
            "matchCriteriaId": "7101AE06-0C27-4A04-A232-10E4327A9C18"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_66:*:*:*:*:*:*",
            "matchCriteriaId": "47EE9CF9-65D8-4DB3-82EA-ECC20447B037"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_75:*:*:*:*:*:*",
            "matchCriteriaId": "0E784373-CFE7-4598-809F-5C4DBCEF70AA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_78:*:*:*:*:*:*",
            "matchCriteriaId": "AEF420B8-0D77-47B1-A19E-9311BD86CA6E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "B5B93BB5-16BB-452A-97D5-10C7772F660F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_81:*:*:*:*:*:*",
            "matchCriteriaId": "A1F6B14B-40C5-4FEF-BC85-84E4B4361079"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_82:*:*:*:*:*:*",
            "matchCriteriaId": "3ECC6338-F541-449F-AD62-9D852F4E7454"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_85:*:*:*:*:*:*",
            "matchCriteriaId": "B14FD6AB-A559-49B9-9C97-978647042EAC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_87:*:*:*:*:*:*",
            "matchCriteriaId": "D6F74C50-FB32-446F-94FF-F5342D56741A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_9:*:*:*:*:*:*",
            "matchCriteriaId": "B531E951-4293-45C1-A779-9B7052704AC8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_93:*:*:*:*:*:*",
            "matchCriteriaId": "FCA346D0-0D8E-4FB4-AE11-E0A062A339BD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_94:*:*:*:*:*:*",
            "matchCriteriaId": "9F6F7CC6-CC82-40BE-88FE-0A2B43ACA314"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_95:*:*:*:*:*:*",
            "matchCriteriaId": "7C669D64-A6B6-495A-BBC2-62B6947978E0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "A8F7304B-C04F-4C5B-9E98-D736C55A0AE2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "A897D6EA-56D9-4246-9985-9BCE0B5B575E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_101:*:*:*:*:*:*",
            "matchCriteriaId": "A93B1873-08AD-45D4-9F27-D76DEBD445E4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "C29DD086-7438-45BD-B1DC-B20D2753A7E2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_105:*:*:*:*:*:*",
            "matchCriteriaId": "A7792771-5225-4B15-8B12-94AC5DB158D8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_111:*:*:*:*:*:*",
            "matchCriteriaId": "54CF3193-F101-4BD9-952F-47886308799B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_113:*:*:*:*:*:*",
            "matchCriteriaId": "F012878A-86CE-4881-94C1-CA39420E2888"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_115:*:*:*:*:*:*",
            "matchCriteriaId": "E8A50B35-2459-43C2-840B-D3BC78837C6A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "C62D9794-379F-4722-B467-0CFE65A12B80"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_119:*:*:*:*:*:*",
            "matchCriteriaId": "D92A32EE-259C-423B-B422-A765EF4426F9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_120:*:*:*:*:*:*",
            "matchCriteriaId": "668D309B-DA82-4EC4-9F09-A5772BC17447"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "1230C289-7789-471F-9EA3-2FE2DCDA6981"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "96187221-D11F-4CFA-83AD-0548A528C320"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_127:*:*:*:*:*:*",
            "matchCriteriaId": "AF79E967-AEE7-494E-B8E4-94ABFE8BEFB7"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "E450F71D-626F-4515-91A2-5F4FCD8FE21D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_141:*:*:*:*:*:*",
            "matchCriteriaId": "6E73C0C0-227D-42EA-9E5F-BD9120E94213"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_146:*:*:*:*:*:*",
            "matchCriteriaId": "926F2DA0-8168-4EED-BB8E-E9A7BC185970"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_158:*:*:*:*:*:*",
            "matchCriteriaId": "5B16C81F-361A-475A-A7EF-417738EC555A"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_161:*:*:*:*:*:*",
            "matchCriteriaId": "1A14DC8E-32C7-4BA9-A88E-6D03F8473DDD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_166:*:*:*:*:*:*",
            "matchCriteriaId": "34C9AF5B-F155-4D9C-B4B4-730696A85873"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "273F628E-2889-412C-BC02-82FEEF4CE6AF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_26:*:*:*:*:*:*",
            "matchCriteriaId": "40CC00A2-E57F-49B8-BD9A-A3107258EFF9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_38:*:*:*:*:*:*",
            "matchCriteriaId": "38C33CF8-3FA4-4775-91CF-83B9A4B51B5D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "186C5B76-630C-483E-9C44-27BA00A1365B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "965C32C2-BAD2-415A-B8F3-A5B2A96C077F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_45:*:*:*:*:*:*",
            "matchCriteriaId": "1D7B7908-F110-4937-A16F-E942F7EE94E8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_53:*:*:*:*:*:*",
            "matchCriteriaId": "A7CE4E97-2553-4B54-9B49-2AEFFF1E97DF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_54:*:*:*:*:*:*",
            "matchCriteriaId": "C3BB26FE-A7A4-4C0C-82E0-3B690C08AF4D"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_65:*:*:*:*:*:*",
            "matchCriteriaId": "CC0BAF78-22E6-4F90-885D-654A317832C3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_70:*:*:*:*:*:*",
            "matchCriteriaId": "2CEFB387-F28B-4A26-B0BD-A99D88765CF2"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_76:*:*:*:*:*:*",
            "matchCriteriaId": "05C5D50F-DD77-4B91-9B98-EA79206E3AEC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_79:*:*:*:*:*:*",
            "matchCriteriaId": "E7A2F23D-A588-4895-91CB-F4726D244E71"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_8:*:*:*:*:*:*",
            "matchCriteriaId": "496C913F-16A4-4710-80EB-0444ED57F981"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_84:*:*:*:*:*:*",
            "matchCriteriaId": "F7B7D466-132A-4584-B6D8-68C05F02E3AE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_89:*:*:*:*:*:*",
            "matchCriteriaId": "B8DDE050-D1E9-4E42-A511-FE85C5482EAD"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_90:*:*:*:*:*:*",
            "matchCriteriaId": "2508B0C0-F3F7-4993-A90B-31DBD299C7EB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_92:*:*:*:*:*:*",
            "matchCriteriaId": "EB51FD59-0119-4335-851F-65F108E34885"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_96:*:*:*:*:*:*",
            "matchCriteriaId": "F26A6EE5-5083-42BE-822A-66BB279B68F6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_98:*:*:*:*:*:*",
            "matchCriteriaId": "D3BC31FE-EE44-4919-96F1-A3CD9EB2E6F9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_99:*:*:*:*:*:*",
            "matchCriteriaId": "54AF1EBC-02AE-4303-93E9-ACE2C15831B3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:-:*:*:*:*:*:*",
            "matchCriteriaId": "9A4DD35F-132E-4CB4-846C-8C0A0DAE11A3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_10:*:*:*:*:*:*",
            "matchCriteriaId": "28B96884-0ED3-4B3F-9FF2-D9826C6A11C8"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_103:*:*:*:*:*:*",
            "matchCriteriaId": "498B5193-9227-408B-BB96-93D47FE6C136"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_107:*:*:*:*:*:*",
            "matchCriteriaId": "5F5BF964-A06C-46B4-BBAF-B992F2BFE5BA"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_118:*:*:*:*:*:*",
            "matchCriteriaId": "D6BC96F7-EA95-4126-AF11-CA51E710B8B5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_12:*:*:*:*:*:*",
            "matchCriteriaId": "25CBBD3E-F6BC-44A8-ADF8-A2A683C4FD90"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_122:*:*:*:*:*:*",
            "matchCriteriaId": "09AFB3C5-3E13-4079-B732-9994FB108B80"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_126:*:*:*:*:*:*",
            "matchCriteriaId": "4BB9DABC-4207-4BE4-80B9-5431BE8924CC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_14:*:*:*:*:*:*",
            "matchCriteriaId": "A593B6C5-F968-4C08-9CEC-0D04CBCFCBAE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_18:*:*:*:*:*:*",
            "matchCriteriaId": "B08AEDE4-10E7-49B1-A7E3-343C16651E0C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "F52CCFD6-8E42-4704-BCDB-8D4743AD8878"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_25:*:*:*:*:*:*",
            "matchCriteriaId": "D1A5BD3C-6C81-4948-BD6E-351AE54E051B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_33:*:*:*:*:*:*",
            "matchCriteriaId": "92E9C407-AAF6-4FE8-ABF8-28E78090C2F5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_34:*:*:*:*:*:*",
            "matchCriteriaId": "17892B1E-CFC8-4A21-A654-0C67AE1CEA02"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "782C1482-BF59-4663-A17F-A10247715223"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_39:*:*:*:*:*:*",
            "matchCriteriaId": "ECB15DB7-ACF9-4D7E-8BAC-C65634E7C813"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_41:*:*:*:*:*:*",
            "matchCriteriaId": "D5E45EF8-9B5E-4AAB-8952-9358AC1625D4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_43:*:*:*:*:*:*",
            "matchCriteriaId": "BAA7ADEB-B8BF-41C3-B8F9-44B3F617A8B6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "539F141A-9129-418A-8C86-8DF565A0106B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_60:*:*:*:*:*:*",
            "matchCriteriaId": "2F1C55C8-9EFD-4B74-A1B9-83E1B8B4B306"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_73:*:*:*:*:*:*",
            "matchCriteriaId": "BC2BB169-1FE9-4DD9-95DD-C2875068B976"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_91:*:*:*:*:*:*",
            "matchCriteriaId": "7924252E-97BB-4ADE-81CA-4EB974B6FD51"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:-:*:*:*:*:*:*",
            "matchCriteriaId": "4005C231-9EA2-40A5-A2F0-5A94EA498E96"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_19:*:*:*:*:*:*",
            "matchCriteriaId": "395F93BF-DAC3-4213-AA34-D708570B5B9F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_24:*:*:*:*:*:*",
            "matchCriteriaId": "CF84D1C9-E656-4CBF-85DB-3AE434DF87F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_36:*:*:*:*:*:*",
            "matchCriteriaId": "43F8A4D6-ECED-4155-A41C-48B1506D32B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_40:*:*:*:*:*:*",
            "matchCriteriaId": "5ABBDE5D-BD23-45CE-BDA8-3168C53803B4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_44:*:*:*:*:*:*",
            "matchCriteriaId": "5D89F1B2-43E0-486D-AEC6-0D1B35C4B8A4"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_6:*:*:*:*:*:*",
            "matchCriteriaId": "05B0445D-E33E-4F3F-B21C-B6988C8F0BBB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.20:-:*:*:*:*:*:*",
            "matchCriteriaId": "10FE3305-F601-4757-9080-E7F41B2974AA"
          }
        ]
      }
    ]
  }
]

04CVE-2026-104286

Fortinet · FortiMail

Ahora · Prioridad 85/100

Fortinet FortiMail Path Traversal Vulnerability

  • en CISA KEV (explotación confirmada) hace 14 días
  • EPSS en percentil ≥ 80
  • CVSS crítico ≥ 9

CVSS 9.8EPSS 2.20%Percentil 82.2%

KEV: 2026-10-01 · Ransomware: desconocido · Plazo CISA: 2026-10-04

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.2.0",
            "versionEndIncluding": "7.4.8",
            "matchCriteriaId": "77C9CE10-1038-4100-81E0-234822E6373B"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.6.0",
            "versionEndIncluding": "7.6.6",
            "matchCriteriaId": "1EA73418-A7A1-4247-BA3E-969550962E0E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "8.0.0",
            "versionEndIncluding": "8.0.1",
            "matchCriteriaId": "DDAF1B20-36CA-4DD4-9483-6B605001B9DA"
          }
        ]
      }
    ]
  }
]

05CVE-2026-59310

Broadcom · VMware vCenter

Ahora · Prioridad 85/100

Broadcom VMware vCenter Path Traversal Vulnerability

  • en CISA KEV (explotación confirmada) hace 58 días
  • ligada a ransomware
  • EPSS en percentil ≥ 80

CVSS sin puntuarEPSS 2.56%Percentil 84.8%

KEV: 2026-08-18 · Ransomware: reportado · Plazo CISA: 2026-08-21

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

06CVE-2026-63077

JetBrains · TeamCity

Ahora · Prioridad 85/100

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

  • en CISA KEV (explotación confirmada) hace 71 días
  • ligada a ransomware
  • EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 89.57%Percentil 99.8%

KEV: 2026-08-05 · Ransomware: reportado · Plazo CISA: 2026-08-08

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

07CVE-2026-87902

WordPress · Core

Ahora · Prioridad 85/100

WordPress Core Remote File Inclusion Vulnerability

  • en CISA KEV (explotación confirmada) hace 20 días
  • EPSS en percentil ≥ 95

CVSS 8.1EPSS 39.98%Percentil 98.6%

KEV: 2026-09-25 · Ransomware: desconocido · Plazo CISA: 2026-09-28

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "4.7.37",
            "matchCriteriaId": "F1CFA516-E292-436E-9B45-BD6ACB344205"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "4.8",
            "versionEndExcluding": "4.8.32",
            "matchCriteriaId": "8EEBFAB5-8903-4D4E-9847-A50A3F840878"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "4.9",
            "versionEndExcluding": "4.9.33",
            "matchCriteriaId": "5A7719CA-2099-45E9-8E48-64EF672C76C0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.0",
            "versionEndExcluding": "5.0.29",
            "matchCriteriaId": "BFA3645E-7056-449B-9DEB-D9D53EB21488"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.1",
            "versionEndExcluding": "5.1.26",
            "matchCriteriaId": "3582671F-7248-420A-8DF7-F32742D0D2AF"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.2",
            "versionEndExcluding": "5.2.28",
            "matchCriteriaId": "FD9C147A-9FCB-46A7-8409-4AE652986FDC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.3",
            "versionEndExcluding": "5.3.25",
            "matchCriteriaId": "73C13CF0-B293-47C4-93AA-F46E0323A9C1"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.4",
            "versionEndExcluding": "5.4.23",
            "matchCriteriaId": "7FB5AE52-9590-4B1D-BDFF-A522EFDD55DC"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.5",
            "versionEndExcluding": "5.5.22",
            "matchCriteriaId": "72A42175-5759-47B1-8E87-ADAF0CDB73C7"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.6",
            "versionEndExcluding": "5.6.21",
            "matchCriteriaId": "5D7C48F3-BBB2-4943-A6F2-E652997034FE"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.7",
            "versionEndExcluding": "5.7.19",
            "matchCriteriaId": "D23FACBB-B9EC-4490-B328-24833FEF6209"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.8",
            "versionEndExcluding": "5.8.17",
            "matchCriteriaId": "47F4A57C-CA16-4E9A-B0C2-EBB5FCCB41B9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.9",
            "versionEndExcluding": "5.9.18",
            "matchCriteriaId": "83CC56B0-F56E-4862-B74E-B106092C73F0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.0",
            "versionEndExcluding": "6.0.16",
            "matchCriteriaId": "E3EE7487-2943-4229-8B04-8787FE730FCB"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.1",
            "versionEndExcluding": "6.1.14",
            "matchCriteriaId": "E83A61A6-8FBC-4AF6-98E6-0152CA380AA0"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.2",
            "versionEndExcluding": "6.2.13",
            "matchCriteriaId": "D97C90F9-83C3-4057-A7E2-61787BC24E05"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.3",
            "versionEndExcluding": "6.3.12",
            "matchCriteriaId": "D7DA40D7-228A-4CFF-8CC8-32321BB1D3C5"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.4",
            "versionEndExcluding": "6.4.12",
            "matchCriteriaId": "DDE93788-7DAB-475C-B6AE-753780DE8160"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.5",
            "versionEndExcluding": "6.5.12",
            "matchCriteriaId": "18808A77-C445-4D07-A364-A676F2D7FD63"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.6",
            "versionEndExcluding": "6.6.9",
            "matchCriteriaId": "ADEAA29A-1862-476B-8F21-684D8799589E"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.7",
            "versionEndExcluding": "6.7.9",
            "matchCriteriaId": "D3BD738C-4601-43C1-A5BC-E5AFB0189CD9"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.8",
            "versionEndExcluding": "6.8.10",
            "matchCriteriaId": "4A6867FC-850F-437B-8532-63A5F747D64F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.9",
            "versionEndExcluding": "6.9.9",
            "matchCriteriaId": "5C21A09B-5001-4F4E-A49D-4F29032AF612"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.0",
            "versionEndExcluding": "7.0.6",
            "matchCriteriaId": "6FC26EAE-8D7D-4BF9-AACE-75C6AB13279F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.1",
            "versionEndExcluding": "7.1.2",
            "matchCriteriaId": "525A2372-93E8-447E-BBB7-F795C08B3E2B"
          }
        ]
      }
    ]
  }
]

08CVE-2015-3306

ProFTPD · ProFTPD

Ahora · Prioridad 84/100

ProFTPD Improper Access Control Vulnerability

  • en CISA KEV (explotación confirmada) hace 7 días
  • EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 99.50%Percentil 99.9%

KEV: 2026-10-08 · Ransomware: desconocido · Plazo CISA: 2026-10-11

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

09CVE-2015-5477

ISC · BIND

Ahora · Prioridad 84/100

ISC BIND Data Processing Errors Vulnerability

  • en CISA KEV (explotación confirmada) hace 7 días
  • EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 99.41%Percentil 99.9%

KEV: 2026-10-08 · Ransomware: desconocido · Plazo CISA: 2026-10-11

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

10CVE-2016-3081

Apache · Struts

Ahora · Prioridad 84/100

Apache Struts Command Injection Vulnerability

  • en CISA KEV (explotación confirmada) hace 7 días
  • EPSS en percentil ≥ 95

CVSS sin puntuarEPSS 96.05%Percentil 99.9%

KEV: 2026-10-08 · Ransomware: desconocido · Plazo CISA: 2026-10-11

Versiones y rangos reportados

La fuente no proporciona rangos en este registro.

Incorporaciones a KEV · 12 semanas

Semanas ISO; la última está en curso. Escala desde cero.

Ver tabla de datos semanales
Incorporaciones a KEV por semana ISO
SemanaCVEs añadidos
2026-W313
2026-W326
2026-W333
2026-W349
2026-W3511
2026-W3610
2026-W3714
2026-W387
2026-W3912
2026-W406
2026-W415
2026-W426

CISA KEV · actualizado hace 12 h

Fabricantes más explotados (90 días)

Por CVEs incorporados a KEV; no mide ataques ni cuota de mercado.

  1. Microsoft9
  2. Cisco7
  3. Citrix5
  4. Linux5
  5. JFrog4
  6. Check Point3
  7. Fortinet3
  8. Google3
  9. MikroTik3
  10. N-able3

CISA KEV · actualizado hace 12 h

Explora el catálogo

KEV completo + críticas publicadas en 30 días · 3,496 registros (los 10 primeros están arriba) · Orden: prioridad descendente

Limpiar filtros

3161CVE-2026-96113

Microsoft · Windows 10 Version 1607

Vigilar · Prioridad 24/100

Windows Domain Name Service Remote Code Execution Vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.67%Percentil 51.0%

Versiones y rangos reportados
[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23470",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23470",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.5761",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

3162CVE-2026-96119

IBM · i

Vigilar · Prioridad 24/100

IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.51%Percentil 41.9%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:ibm:i:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "7.3",
            "versionEndIncluding": "7.6",
            "matchCriteriaId": "8D60DAD5-03DF-4682-999D-A0D0AC6DE47E"
          }
        ]
      }
    ]
  }
]

3163CVE-2026-96207

Microsoft · Microsoft Partner Center

Vigilar · Prioridad 24/100

Microsoft Partner Center Elevation of Privilege Vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 10EPSS 0.48%Percentil 39.7%

Versiones y rangos reportados
[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Partner Center",
    "versions": [
      {
        "version": "-",
        "status": "affected"
      }
    ]
  }
]

3164CVE-2026-96219

Microsoft · Windows 10 Version 1809

Vigilar · Prioridad 24/100

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.89%Percentil 58.6%

Versiones y rangos reportados
[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 21H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19044.0",
        "lessThan": "10.0.19044.7807",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 22H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19045.0",
        "lessThan": "10.0.19044.7807",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 23H2",
    "platforms": [
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.7652",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 23H2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.7652",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 24H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.9711",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 25H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26200.0",
        "lessThan": "10.0.26200.9711",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 26H1",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.28000.0",
        "lessThan": "10.0.28000.3231",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 26H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26300.0",
        "lessThan": "10.0.26300.9711",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.5761",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

3165CVE-2026-96252

Microsoft · Windows 10 Version 1607

Vigilar · Prioridad 24/100

Active Directory Federation Services (AD FS) Spoofing Vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.48%Percentil 39.9%

Versiones y rangos reportados
[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23470",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23470",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.5761",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

3166CVE-2026-96257

Fast · FAC1203R Gigabit Edition

Vigilar · Prioridad 24/100

Fast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflow

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 10EPSS 0.58%Percentil 46.6%

Versiones y rangos reportados
[
  {
    "vendor": "Fast",
    "product": "FAC1203R Gigabit Edition",
    "versions": [
      {
        "version": "2.0.4",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:a:fast:fac1203r_gigabit_edition:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "Device Discovery Service"
    ]
  }
]

3167CVE-2026-96276

Red Hat · Red Hat Enterprise Linux 10

Vigilar · Prioridad 24/100

Flatpak: flatpak: arbitrary write in host context via flatpak build-init

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.37%Percentil 29.5%

Versiones y rangos reportados
[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "flatpak",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "flatpak",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "flatpak",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "flatpak",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  }
]

3168CVE-2026-96320

Microsoft · Windows 10 Version 1607

Vigilar · Prioridad 24/100

Windows DHCP Server Remote Code Execution Vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.93%Percentil 59.7%

Versiones y rangos reportados
[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23470",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23470",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.5761",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

3169CVE-2026-96327

VibeThemes · WPLMS

Vigilar · Prioridad 24/100

WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.25%Percentil 15.2%

Versiones y rangos reportados
[
  {
    "vendor": "VibeThemes",
    "product": "WPLMS",
    "packageName": "wplms_plugin",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "versionType": "custom",
        "status": "affected",
        "lessThan": "1.9.9.8.2",
        "changes": [
          {
            "at": "1.9.9.8.2",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]

3170CVE-2026-96328

jegtheme · JNews - Pay Writer

Vigilar · Prioridad 24/100

WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.23%Percentil 12.8%

Versiones y rangos reportados
[
  {
    "vendor": "jegtheme",
    "product": "JNews - Pay Writer",
    "packageName": "jnews-pay-writer",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "versionType": "custom",
        "status": "affected",
        "lessThanOrEqual": "12.0.1",
        "changes": [
          {
            "at": "12.0.2",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]

3171CVE-2026-96330

tagDiv · tagDiv Opt-In Builder

Vigilar · Prioridad 24/100

WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.23%Percentil 12.8%

Versiones y rangos reportados
[
  {
    "vendor": "tagDiv",
    "product": "tagDiv Opt-In Builder",
    "packageName": "td-subscription",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "versionType": "custom",
        "status": "affected",
        "lessThanOrEqual": "1.7.6",
        "changes": [
          {
            "at": "1.7.7",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]

3172CVE-2026-96331

wpdreams · Ajax Search Pro

Vigilar · Prioridad 24/100

WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.24%Percentil 14.3%

Versiones y rangos reportados
[
  {
    "vendor": "wpdreams",
    "product": "Ajax Search Pro",
    "packageName": "ajax-search-pro",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "versionType": "custom",
        "status": "affected",
        "lessThanOrEqual": "4.29.1",
        "changes": [
          {
            "at": "4.29.2",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]

3173CVE-2026-96349

SiteSkite · SiteSkite

Vigilar · Prioridad 24/100

WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 10EPSS 0.60%Percentil 47.5%

Versiones y rangos reportados
[
  {
    "vendor": "SiteSkite",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "siteskite",
    "product": "SiteSkite",
    "versions": [
      {
        "lessThanOrEqual": "2.1.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom",
        "changes": [
          {
            "at": "2.2.0",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]

3174CVE-2026-96350

Estatik · Estatik

Vigilar · Prioridad 24/100

WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.45%Percentil 37.5%

Versiones y rangos reportados
[
  {
    "vendor": "Estatik",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "estatik",
    "product": "Estatik",
    "versions": [
      {
        "lessThanOrEqual": "4.3.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom",
        "changes": [
          {
            "at": "4.3.6",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]

3175CVE-2026-96408

Six Apart Ltd. · Movable Type Cloud Edition

Vigilar · Prioridad 24/100

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.4EPSS 0.64%Percentil 49.6%

Versiones y rangos reportados
[
  {
    "vendor": "Six Apart Ltd.",
    "product": "Movable Type Cloud Edition",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "9.2.0",
        "status": "affected",
        "versionType": "semver",
        "lessThanOrEqual": "9.2.1"
      }
    ]
  },
  {
    "vendor": "Six Apart Ltd.",
    "product": "Movable Type",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "9.0.0",
        "status": "affected",
        "versionType": "semver",
        "lessThanOrEqual": "9.0.9"
      },
      {
        "version": "8.8.0",
        "status": "affected",
        "versionType": "semver",
        "lessThanOrEqual": "8.8.5"
      },
      {
        "version": "8.0.0",
        "status": "affected",
        "versionType": "semver",
        "lessThanOrEqual": "8.0.12"
      }
    ]
  },
  {
    "vendor": "Six Apart Ltd.",
    "product": "Movable Type Premium Cloud Edition",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "9.2.0",
        "status": "affected",
        "versionType": "semver",
        "lessThanOrEqual": "9.2.1"
      }
    ]
  },
  {
    "vendor": "Six Apart Ltd.",
    "product": "Movable Type Premium",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "9.0.0",
        "status": "affected",
        "versionType": "semver",
        "lessThanOrEqual": "9.0.9"
      },
      {
        "version": "2.0",
        "status": "affected",
        "versionType": "semver",
        "lessThanOrEqual": "2.17"
      }
    ]
  }
]

3176CVE-2026-96428

Flowring Technology Corp · Agentflow 4.0

Vigilar · Prioridad 24/100

Flowring Agentflow 4.0 - SQL Injection

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.34%Percentil 26.0%

Versiones y rangos reportados
[
  {
    "vendor": "Flowring Technology Corp",
    "product": "Agentflow 4.0",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2025/08/08",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

3177CVE-2026-96429

Flowring Technology Corp · Agentflow 4.0

Vigilar · Prioridad 24/100

Flowring Agentflow 4.0 - SQL Injection

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.28%Percentil 18.8%

Versiones y rangos reportados
[
  {
    "vendor": "Flowring Technology Corp",
    "product": "Agentflow 4.0",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2025/08/08",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

3178CVE-2026-96431

Flowring Technology Corp · Agentflow 4.0

Vigilar · Prioridad 24/100

Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Type

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.27%Percentil 18.5%

Versiones y rangos reportados
[
  {
    "vendor": "Flowring Technology Corp",
    "product": "Agentflow 4.0",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2023/03/24",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

3179CVE-2026-96560

ModelTC · LightLLM

Vigilar · Prioridad 24/100

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.65%Percentil 50.1%

Versiones y rangos reportados
[
  {
    "vendor": "ModelTC",
    "product": "LightLLM",
    "packageName": "LightLLM",
    "repo": "https://github.com/ModelTC/lightllm",
    "packageURL": "pkg:github/ModelTC/lightllm",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "semver",
        "lessThanOrEqual": "1.2.0"
      }
    ]
  }
]

3180CVE-2026-96587

Viidure · Dashcam Android Application

Vigilar · Prioridad 24/100

Use of Hard-coded Credentials in Viidure Dashcam Android Application

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 10EPSS 0.34%Percentil 26.2%

Versiones y rangos reportados
[
  {
    "vendor": "Viidure",
    "product": "Dashcam Android Application",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "3.3.1.260403",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

3181CVE-2026-96658

Red Hat · Red Hat Satellite 6.16 for RHEL 8

Vigilar · Prioridad 24/100

Foreman: safemode bypass leading to rce

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.9EPSS 0.72%Percentil 52.9%

Versiones y rangos reportados
[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.16 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-safemode",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.0-2.el8sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.16::el8",
      "cpe:/a:redhat:satellite:6.16::el9",
      "cpe:/a:redhat:satellite_capsule:6.16::el8",
      "cpe:/a:redhat:satellite_capsule:6.16::el9",
      "cpe:/a:redhat:satellite_utils:6.16::el8",
      "cpe:/a:redhat:satellite_utils:6.16::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.16 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-safemode",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.0-2.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.16::el8",
      "cpe:/a:redhat:satellite:6.16::el9",
      "cpe:/a:redhat:satellite_capsule:6.16::el8",
      "cpe:/a:redhat:satellite_capsule:6.16::el9",
      "cpe:/a:redhat:satellite_utils:6.16::el8",
      "cpe:/a:redhat:satellite_utils:6.16::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.14.0.22-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-dynaconf",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.2.13-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-gitpython",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.1.62-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-lxml",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:5.3.1-2.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-sqlparse",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:0.6.0-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-foreman_remote_execution",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:15.0.2-2.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-hammer_cli",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.14.0-2.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-katello",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.16.0.20-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-safemode",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.0-2.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "satellite",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:6.17.12-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "yggdrasil-worker-forwarder",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:0.1.0-2.1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.18 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-safemode",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.0-2.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.18::el9",
      "cpe:/a:redhat:satellite_capsule:6.18::el9",
      "cpe:/a:redhat:satellite_utils:6.18::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.19 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.18.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.19::el9",
      "cpe:/a:redhat:satellite_capsule:6.19::el9",
      "cpe:/a:redhat:satellite_utils:6.19::el9"
    ]
  }
]

3182CVE-2026-96659

Red Hat · Red Hat Satellite 6.16 for RHEL 8

Vigilar · Prioridad 24/100

Foreman: excessive permissions for viewer role on preview

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.33%Percentil 24.4%

Versiones y rangos reportados
[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.16 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.12.0.23-1.el8sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.16::el8",
      "cpe:/a:redhat:satellite:6.16::el9",
      "cpe:/a:redhat:satellite_capsule:6.16::el8",
      "cpe:/a:redhat:satellite_capsule:6.16::el9",
      "cpe:/a:redhat:satellite_utils:6.16::el8",
      "cpe:/a:redhat:satellite_utils:6.16::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.16 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.12.0.23-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.16::el8",
      "cpe:/a:redhat:satellite:6.16::el9",
      "cpe:/a:redhat:satellite_capsule:6.16::el8",
      "cpe:/a:redhat:satellite_capsule:6.16::el9",
      "cpe:/a:redhat:satellite_utils:6.16::el8",
      "cpe:/a:redhat:satellite_utils:6.16::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.14.0.22-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-dynaconf",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.2.13-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-gitpython",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.1.62-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-lxml",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:5.3.1-2.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-sqlparse",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:0.6.0-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-foreman_remote_execution",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:15.0.2-2.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-hammer_cli",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.14.0-2.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-katello",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.16.0.20-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-safemode",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.0-2.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "satellite",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:6.17.12-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "yggdrasil-worker-forwarder",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:0.1.0-2.1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.18 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.16.0.25-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.18::el9",
      "cpe:/a:redhat:satellite_capsule:6.18::el9",
      "cpe:/a:redhat:satellite_utils:6.18::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.19 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.18.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.19::el9",
      "cpe:/a:redhat:satellite_capsule:6.19::el9",
      "cpe:/a:redhat:satellite_utils:6.19::el9"
    ]
  }
]

3183CVE-2026-96754

orval-labs · orval

Vigilar · Prioridad 24/100

orval @orval/hono before 8.29.0 Code Injection via OpenAPI Path

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.43%Percentil 35.3%

Versiones y rangos reportados
[
  {
    "vendor": "orval-labs",
    "product": "orval",
    "defaultStatus": "unaffected",
    "packageURL": "pkg:npm/orval",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "8.29.0"
      },
      {
        "version": "8.29.0",
        "status": "unaffected",
        "versionType": "semver"
      }
    ]
  }
]

3184CVE-2026-96755

orval-labs · orval

Vigilar · Prioridad 24/100

orval @orval/effect 8.14.0 through 8.28.1 Code Injection

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.42%Percentil 34.4%

Versiones y rangos reportados
[
  {
    "vendor": "orval-labs",
    "product": "orval",
    "defaultStatus": "unaffected",
    "packageURL": "pkg:npm/orval",
    "versions": [
      {
        "version": "8.14.0",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "8.29.0"
      },
      {
        "version": "8.29.0",
        "status": "unaffected",
        "versionType": "semver"
      }
    ]
  }
]

3185CVE-2026-96756

orval-labs · orval

Vigilar · Prioridad 24/100

orval before 8.30.0 Code Injection via Factory Generation

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.2EPSS 0.48%Percentil 40.0%

Versiones y rangos reportados
[
  {
    "vendor": "orval-labs",
    "product": "orval",
    "defaultStatus": "unaffected",
    "packageURL": "pkg:npm/orval",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "8.30.0"
      },
      {
        "version": "8.30.0",
        "status": "unaffected",
        "versionType": "semver"
      }
    ]
  }
]

3186CVE-2026-96757

orval-labs · orval

Vigilar · Prioridad 24/100

orval before 8.29.0 Code Injection via unescaped OpenAPI media-type

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.57%Percentil 45.7%

Versiones y rangos reportados
[
  {
    "vendor": "orval-labs",
    "product": "orval",
    "defaultStatus": "unaffected",
    "packageURL": "pkg:npm/orval",
    "versions": [
      {
        "version": "6.7.1",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "8.29.0"
      },
      {
        "version": "8.29.0",
        "status": "unaffected",
        "versionType": "semver"
      }
    ]
  }
]

3187CVE-2026-96758

orval-labs · orval

Vigilar · Prioridad 24/100

orval @orval/core before 8.28.0 Code Injection via Form-Data

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.54%Percentil 44.1%

Versiones y rangos reportados
[
  {
    "vendor": "orval-labs",
    "product": "orval",
    "defaultStatus": "unaffected",
    "packageURL": "pkg:npm/orval",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "8.28.0"
      },
      {
        "version": "8.28.0",
        "status": "unaffected",
        "versionType": "semver"
      }
    ]
  }
]

3188CVE-2026-96759

orval-labs · orval

Vigilar · Prioridad 24/100

orval before 8.29.0 Code Injection via operationId

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.43%Percentil 35.2%

Versiones y rangos reportados
[
  {
    "vendor": "orval-labs",
    "product": "orval",
    "defaultStatus": "unaffected",
    "packageURL": "pkg:npm/orval",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "8.29.0"
      },
      {
        "version": "8.29.0",
        "status": "unaffected",
        "versionType": "semver"
      }
    ]
  }
]

3189CVE-2026-96760

Authlib · Authlib

Vigilar · Prioridad 24/100

Authlib library contains a signature‑verification bypass vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.28%Percentil 18.9%

Versiones y rangos reportados
[
  {
    "vendor": "Authlib",
    "product": "Authlib",
    "versions": [
      {
        "status": "affected",
        "version": "1.7.2"
      }
    ]
  }
]

3190CVE-2026-96770

Temporal Technologies, Inc. · s2s-proxy

Vigilar · Prioridad 24/100

s2s-proxy accepts untrusted client certificates

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.25%Percentil 15.8%

Versiones y rangos reportados
[
  {
    "vendor": "Temporal Technologies, Inc.",
    "product": "s2s-proxy",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "github.com/temporalio/s2s-proxy",
    "repo": "https://github.com/temporalio/s2s-proxy",
    "programFiles": [
      "encryption/tls.go"
    ],
    "programRoutines": [
      {
        "name": "GetServerTLSConfig"
      }
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0.0.1-alpha",
        "lessThanOrEqual": "0.2.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

3191CVE-2026-96809

MultiNet Interactive AB · EduAdmin Booking

Vigilar · Prioridad 24/100

WordPress EduAdmin Booking plugin < 6.0.0 - SQL Injection vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.24%Percentil 14.3%

Versiones y rangos reportados
[
  {
    "vendor": "MultiNet Interactive AB",
    "product": "EduAdmin Booking",
    "packageName": "eduadmin-booking",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "versionType": "custom",
        "status": "affected",
        "lessThan": "6.0.0",
        "changes": [
          {
            "at": "6.0.0",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]

3192CVE-2026-96822

Hossni Mubarak · Books Gallery

Vigilar · Prioridad 24/100

WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.29%Percentil 20.2%

Versiones y rangos reportados
[
  {
    "vendor": "Hossni Mubarak",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wp-books-gallery",
    "product": "Books Gallery",
    "versions": [
      {
        "lessThanOrEqual": "4.8.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom",
        "changes": [
          {
            "at": "4.8.4",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]

3193CVE-2026-96864

Microsoft · Windows 10 Version 1607

Vigilar · Prioridad 24/100

Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.65%Percentil 49.8%

Versiones y rangos reportados
[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23470",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23470",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.5761",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

3194CVE-2026-96891

D-Link · DIR-825

Vigilar · Prioridad 24/100

D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.65%Percentil 50.1%

Versiones y rangos reportados
[
  {
    "vendor": "D-Link",
    "product": "DIR-825",
    "versions": [
      {
        "version": "3.00b32",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:h:d-link:dir-825:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "rp-l2tp"
    ]
  }
]

3195CVE-2026-96909

Microsoft · Windows 11 version 23H2

Vigilar · Prioridad 24/100

Windows BitLocker Remote Code Execution Vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.89%Percentil 58.6%

Versiones y rangos reportados
[
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 23H2",
    "platforms": [
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.7652",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 23H2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.7652",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 24H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.9711",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 25H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26200.0",
        "lessThan": "10.0.26200.9711",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 26H1",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.28000.0",
        "lessThan": "10.0.28000.3231",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 26H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26300.0",
        "lessThan": "10.0.26300.9711",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.5761",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

3196CVE-2026-96924

Microsoft · Windows 10 Version 1607

Vigilar · Prioridad 24/100

Windows OLE Remote Code Execution Vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.89%Percentil 58.6%

Versiones y rangos reportados
[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 21H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19044.0",
        "lessThan": "10.0.19044.7807",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 22H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19045.0",
        "lessThan": "10.0.19044.7807",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 23H2",
    "platforms": [
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.7652",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 23H2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.7652",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 24H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.9711",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 25H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26200.0",
        "lessThan": "10.0.26200.9711",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 26H1",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.28000.0",
        "lessThan": "10.0.28000.3231",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 26H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26300.0",
        "lessThan": "10.0.26300.9711",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23470",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23470",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.5761",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

3197CVE-2026-96934

Microsoft · Windows 10 Version 1607

Vigilar · Prioridad 24/100

Windows DHCP Server Remote Code Execution Vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.73%Percentil 53.1%

Versiones y rangos reportados
[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26434",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23470",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23470",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9612",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9376",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.5761",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33650",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

3198CVE-2026-97016

Microsoft · Microsoft 365 Apps for Enterprise

Vigilar · Prioridad 24/100

Microsoft Office Outlook Remote Code Execution Vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 1.00%Percentil 62.0%

Versiones y rangos reportados
[
  {
    "vendor": "Microsoft",
    "product": "Microsoft 365 Apps for Enterprise",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.1",
        "lessThan": "https://aka.ms/OfficeSecurityReleases",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office LTSC 2021",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.1",
        "lessThan": "16.0.14334.20974",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office LTSC 2024",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.17932.21056",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

3199CVE-2026-97055

SigNoz · signoz

Vigilar · Prioridad 24/100

SigNoz before 0.143.0 Authentication Bypass via Empty JWT Secret

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.2EPSS 0.41%Percentil 33.2%

Versiones y rangos reportados
[
  {
    "vendor": "SigNoz",
    "product": "signoz",
    "defaultStatus": "unaffected",
    "packageURL": "pkg:golang/github.com/SigNoz/signoz",
    "versions": [
      {
        "version": "0.8.0",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "0.143.0"
      },
      {
        "version": "0.143.0",
        "status": "unaffected",
        "versionType": "semver"
      }
    ]
  }
]

3200CVE-2026-97063

yzcheng90 · X-SpringBoot

Vigilar · Prioridad 24/100

X-SpringBoot through 6.0 Authentication Bypass via Login Code

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.29%Percentil 20.3%

Versiones y rangos reportados
[
  {
    "vendor": "yzcheng90",
    "product": "X-SpringBoot",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "lessThanOrEqual": "6.0",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "packageURL": "pkg:github/yzcheng90/X-SpringBoot",
    "repo": "https://github.com/yzcheng90/X-SpringBoot"
  }
]

3201CVE-2026-97064

yzcheng90 · X-SpringBoot

Vigilar · Prioridad 24/100

X-SpringBoot through 6.0 Authentication Bypass via Static Master Code

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.3EPSS 0.30%Percentil 21.3%

Versiones y rangos reportados
[
  {
    "vendor": "yzcheng90",
    "product": "X-SpringBoot",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "lessThanOrEqual": "6.0",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "packageURL": "pkg:github/yzcheng90/X-SpringBoot",
    "repo": "https://github.com/yzcheng90/X-SpringBoot"
  }
]

3202CVE-2026-97160

lomart.fr · UP plugin for Joomla

Vigilar · Prioridad 24/100

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.4EPSS 1.31%Percentil 70.1%

Versiones y rangos reportados
[
  {
    "defaultStatus": "unaffected",
    "product": "UP plugin for Joomla",
    "vendor": "lomart.fr",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.0-5.2.0"
      },
      {
        "status": "affected",
        "version": "6.0.0-6.0.29"
      }
    ]
  }
]

3203CVE-2026-97161

lomart.fr · UP plugin for Joomla

Vigilar · Prioridad 24/100

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.2EPSS 0.42%Percentil 34.3%

Versiones y rangos reportados
[
  {
    "defaultStatus": "unaffected",
    "product": "UP plugin for Joomla",
    "vendor": "lomart.fr",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.0-5.2.0"
      },
      {
        "status": "affected",
        "version": "6.0.0-6.0.29"
      }
    ]
  }
]

3204CVE-2026-97163

lomart.fr · UP plugin for Joomla

Vigilar · Prioridad 24/100

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 10EPSS 0.42%Percentil 34.3%

Versiones y rangos reportados
[
  {
    "defaultStatus": "unaffected",
    "product": "UP plugin for Joomla",
    "vendor": "lomart.fr",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.0-5.2.0"
      },
      {
        "status": "affected",
        "version": "6.0.0-6.0.29"
      }
    ]
  }
]

3205CVE-2026-97196

Liquid Web / StellarWP · GiveWP

Vigilar · Prioridad 24/100

WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.1EPSS 0.30%Percentil 20.8%

Versiones y rangos reportados
[
  {
    "vendor": "Liquid Web / StellarWP",
    "product": "GiveWP",
    "collectionURL": "https://wordpress.org/plugins",
    "packageName": "give",
    "versions": [
      {
        "status": "affected",
        "version": "n/a",
        "lessThanOrEqual": "4.16.9",
        "changes": [
          {
            "at": "4.17.0",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

3206CVE-2026-97205

F5 · NGINX Plus

Vigilar · Prioridad 24/100

NGINX ngx_http_core_module vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.2EPSS sin publicarPercentil sin publicar

Versiones y rangos reportados
[
  {
    "defaultStatus": "unknown",
    "modules": [
      "ngx_http_core_module"
    ],
    "product": "NGINX Plus",
    "vendor": "F5",
    "versions": [
      {
        "lessThan": "37.1.0.1",
        "status": "affected",
        "version": "37.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "37.0.5.1",
        "status": "affected",
        "version": "37.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "*",
        "status": "affected",
        "version": "R36",
        "versionType": "custom"
      },
      {
        "lessThan": "*",
        "status": "affected",
        "version": "R35",
        "versionType": "custom"
      },
      {
        "lessThan": "*",
        "status": "affected",
        "version": "R34",
        "versionType": "custom"
      },
      {
        "lessThan": "*",
        "status": "affected",
        "version": "R33",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "ngx_http_core_module"
    ],
    "product": "NGINX Open Source",
    "vendor": "F5",
    "versions": [
      {
        "lessThan": "1.31.7",
        "status": "affected",
        "version": "1.31.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.30.6",
        "status": "affected",
        "version": "1.30.0",
        "versionType": "custom"
      }
    ]
  }
]

3207CVE-2026-97229

GitLab · GitLab

Vigilar · Prioridad 24/100

Integer Overflow or Wraparound in GitLab

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 10EPSS 0.56%Percentil 45.2%

Versiones y rangos reportados
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding": "19.2.0",
            "versionEndExcluding": "19.2.8",
            "matchCriteriaId": "A938C22D-FD14-48A6-B46F-CCA9AC8EBC9F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding": "19.2.0",
            "versionEndExcluding": "19.2.8",
            "matchCriteriaId": "EC585668-21D1-41DF-A4FB-17DD48AB9F12"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding": "19.3.0",
            "versionEndExcluding": "19.3.5",
            "matchCriteriaId": "1304F38C-8780-4412-AE0B-D0B65319E8E6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding": "19.3.0",
            "versionEndExcluding": "19.3.5",
            "matchCriteriaId": "75C2C2EE-4DF9-4AB5-9E15-2EC799667C6C"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding": "19.4.0",
            "versionEndExcluding": "19.4.2",
            "matchCriteriaId": "5FD2476C-E11F-4215-A329-C3B189B6611F"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding": "19.4.0",
            "versionEndExcluding": "19.4.2",
            "matchCriteriaId": "FAAF2A38-5C01-490C-A191-8532B58C246B"
          }
        ]
      }
    ]
  }
]

3208CVE-2026-97230

Unknown · Unknown

Vigilar · Prioridad 24/100

IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.24%Percentil 13.4%

Versiones y rangos reportados
[
  {
    "collectionURL": "https://cpan.org/modules",
    "defaultStatus": "unaffected",
    "modules": [
      "IO::Socket::SSL::SelfCertificate"
    ],
    "packageName": "IO-Socket-SSL-SelfCertificate",
    "packageURL": "pkg:cpan/IO-Socket-SSL-SelfCertificate",
    "programFiles": [
      "lib/IO/Socket/SSL/SelfCertificate.pm",
      "lib/IO/Socket/SSL/SelfCertificate/sample/cert.pem"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "1.00",
        "versionType": "custom"
      }
    ]
  }
]

3209CVE-2026-97248

Booking Activities Team · Booking Activities

Vigilar · Prioridad 24/100

WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.39%Percentil 31.0%

Versiones y rangos reportados
[
  {
    "vendor": "Booking Activities Team",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "booking-activities",
    "product": "Booking Activities",
    "versions": [
      {
        "lessThanOrEqual": "1.18.7.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom",
        "changes": [
          {
            "at": "1.18.8",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]

3210CVE-2026-97274

miniOrange · OAuth Single Sign On – SSO (OAuth Client)

Vigilar · Prioridad 24/100

WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability

  • CVSS crítico ≥ 9
  • publicada hace ≤ 30 días
  • sin evidencia KEV; no descarta explotación

CVSS 9.8EPSS 0.30%Percentil 21.2%

Versiones y rangos reportados
[
  {
    "vendor": "miniOrange",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "miniorange-login-with-eve-online-google-facebook",
    "product": "OAuth Single Sign On – SSO (OAuth Client)",
    "versions": [
      {
        "lessThanOrEqual": "7.1.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom",
        "changes": [
          {
            "at": "7.1.3",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]
Cómo calculamos la prioridad

La señal principal es qué tan reciente es la explotación confirmada. Ahora: entró a CISA KEV hace ≤ 30 días, o hace ≤ 90 días y está ligada a ransomware o tiene percentil EPSS ≥ 95. Esta semana: KEV del último año; KEV de cualquier edad con ransomware y percentil EPSS ≥ 95; o CVSS ≥ 9 con percentil EPSS ≥ 80 aunque no esté en KEV. Vigilar: KEV más antiguos sin esas señales y críticas sin evidencia de explotación. Baja: resto. Bases 70 / 45 / 20 / 0; sumamos ransomware +8, percentil ≥ 95 +5 o ≥ 80 +3, CVSS ≥ 9 +4 o ≥ 7 +2 y hasta +10 por recencia en KEV; las bandas no se traslapan (máximo 97 / 75 / 44 / 19). Los plazos CISA vencidos no suben la prioridad: obligan a agencias federales de EE. UU., no a todos; un plazo en los próximos 14 días sí se muestra como razón. No es una probabilidad ni una evaluación de tu entorno. Los datos faltantes limitan la confianza; no equivalen a riesgo cero.