PULSE
EN
FEED
ransomwhitearmor reclama a Ryder · US · Transportationransomwhitearmor reclama a https://t.me/whitearmorxdransomrhysida reclama a Machelen (Belgium) · BEransomemperador reclama a TWICE SRLransomplay reclama a Tailormade Logistics · DK · Transportationransomplay reclama a Coast 2 Coast · US · Retail & E-Commerceransomplay reclama a VPC Builders · US · Professional Servicesransombyod reclama a UPDATE: UNM · Educationransomplay reclama a Hygiena · US · Healthcareransomplay reclama a Money Concepts Capital · US · Financial Servicesransomplay reclama a MicroSearch · Technologyransomplay reclama a QLC · US · Technologyransomwhitearmor reclama a wagyu.xyz · Retail & E-Commerceransomdirewolf reclama a GRUPO PETROIL · MX · Energy & Utilitiesransomwhitearmor reclama a Ryder · US · Transportationransomwhitearmor reclama a https://t.me/whitearmorxdransomrhysida reclama a Machelen (Belgium) · BEransomemperador reclama a TWICE SRLransomplay reclama a Tailormade Logistics · DK · Transportationransomplay reclama a Coast 2 Coast · US · Retail & E-Commerceransomplay reclama a VPC Builders · US · Professional Servicesransombyod reclama a UPDATE: UNM · Educationransomplay reclama a Hygiena · US · Healthcareransomplay reclama a Money Concepts Capital · US · Financial Servicesransomplay reclama a MicroSearch · Technologyransomplay reclama a QLC · US · Technologyransomwhitearmor reclama a wagyu.xyz · Retail & E-Commerceransomdirewolf reclama a GRUPO PETROIL · MX · Energy & Utilities
CVE Watch404,138 en archivo total

Vulnerabilidades explotables hoy

16,806en la vista actual

Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.

En catálogo KEV1,758
Nuevos KEV · 24H0
Exploit Today ≥ 701,691

Distribución · última ventana

  • Crítico
    5,639
  • Alto
    21,796
  • Medio
    20,233
  • Bajo
    2,122
Filtros
Filtros

Ventana

Severidad

Filtros

Vulnerabilidades8,321–8,360 · 16,806
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1066237.5 ALT
37.6%
——11ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.11dCVE-2026-10662210.0 CRÍ
56.2%
——17ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.13dCVE-2026-1066219.1 CRÍ
60.1%
——18ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.13dCVE-2026-1066209.6 CRÍ
35.8%
——11ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed.12dCVE-2026-1066199.0 CRÍ
46.1%
——14ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.13dCVE-2026-1066188.8 ALT
3.3%
——1ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.13dCVE-2026-1066178.8 ALT
8.2%
——2ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.12dCVE-2026-1066168.6 ALT
42.7%
——13ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.12dCVE-2026-1066158.8 ALT
8.2%
——2ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.12dCVE-2026-1066147.8 ALT
6.2%
——2ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.12dCVE-2026-1066138.8 ALT
56.8%
——17ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.12dCVE-2026-1066129.9 CRÍ
44.0%
——13ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.12dCVE-2026-1060908.8 ALT
3.5%
——1ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.11dCVE-2026-1060898.8 ALT
9.5%
——3ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.11dCVE-2026-1059947.7 ALT
24.6%
——7ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed.11dCVE-2026-1059039.9 CRÍ
50.1%
——15ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.11dCVE-2026-1059018.8 ALT
8.2%
——2ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.11dCVE-2026-1059007.5 ALT
52.0%
——16ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.11dCVE-2026-10589910.0 CRÍ
63.9%
——19ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.8dCVE-2026-1058988.2 ALT
2.8%
——1ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.8dCVE-2026-1058978.6 ALT
52.0%
——16ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.11dCVE-2026-1058965.5 MED
3.3%
——1Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1054438.2 ALT
13.6%
——4IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install.12dCVE-2026-1054427.5 ALT
33.4%
——10IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause a denial of service caused by an insecure deserialization in the messaging service.14dCVE-2026-1045875.4 MED
10.4%
——3blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability. The application uses text/template instead of html/template, failing to perform context-aware auto-escaping on the URL and DisplayURL fields of bookmarks in internal/webui/templates/bookmarks.html. An attacker can craft a malicious bookmark URL containing HTML attribute-breaking payloads that execute arbitrary JavaScript in the victim's browser context when rendered in the local web interface.11dCVE-2026-1043487.8 ALT
8.2%
——2Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1043477.8 ALT
4.0%
——1Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1043467.8 ALT
4.0%
——1Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1038295.5 MED
2.6%
——1Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1038285.5 MED
2.6%
——1Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1038275.5 MED
3.5%
——1Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1038265.5 MED
2.6%
——1Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1038255.5 MED
3.7%
——1Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1038245.5 MED
2.6%
——1Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1038235.5 MED
3.5%
——1Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1038225.5 MED
3.7%
——1Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1038217.8 ALT
3.2%
——1Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.12dCVE-2026-1012948.7 ALT
11.5%
——3IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature.14dCVE-2026-1001315.5 MED
3.7%
——1Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.14dCVE-2026-1001305.5 MED
3.7%
——1Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.14d