Vulnerabilidades explotables hoy
16,219en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico5,556
- Alto21,532
- Medio19,934
- Bajo2,099
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1086264.3 MED15.3%
——5JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById handler that allows low-privileged authenticated users to read any message push record. Attackers can supply arbitrary record ids to GET /sys/message/sysMessage/queryById to disclose message content and receiver addresses of other users.11dCVE-2026-1086254.3 MED14.7%
——4JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message push records by calling PUT /sys/message/sysMessage/edit. Attackers can submit a request body naming any sys_sms record id to overwrite its title, content, receiver address and send status without ownership checks.12dCVE-2026-1086245.4 MED18.9%
——6JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController deleteBatch handler that allows low-privileged authenticated users to delete message records. Attackers can obtain record ids from the unguarded list endpoint and submit them to deleteBatch to remove any message push records, including pending queued messages.13dCVE-2026-1086237.1 ALT22.8%
——7JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that allows any authenticated user to delete system audit log entries. Low-privileged attackers can send a DELETE request with ids set to allclear to wipe the entire sys_log table, erasing all users' audit trails.13dCVE-2026-1086225.4 MED18.9%
——6JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler that allows any authenticated user to delete audit log entries. Low-privileged attackers can obtain log ids from the unguarded /sys/log/list endpoint and delete chosen sys_log records to erase traces of their actions.9dCVE-2026-1086214.3 MED14.7%
——4JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController edit handler that allows any authenticated user to modify organizational positions. Low-privileged attackers can obtain position ids from the unguarded list endpoint and send PUT or POST requests to /sys/position/edit to alter position names, codes, and ranks.11dCVE-2026-1086205.4 MED18.9%
——6JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController deleteBatch handler that allows any authenticated user to delete organizational positions. Low-privileged attackers can send comma-separated position ids, obtained from the unguarded list endpoint, to remove all sys_position rows and orphan user-position assignments.12dCVE-2026-1086195.4 MED18.9%
——6JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete message templates via the DELETE /sys/message/sysMessageTemplate/deleteBatch endpoint. Attackers can supply comma-separated template ids from the unguarded list endpoint to delete all sys_sms_template rows, breaking template-based notifications such as workflow reminders.13dCVE-2026-1086184.3 MED14.7%
——4JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message templates via PUT /sys/message/sysMessageTemplate/edit. Attackers can obtain template ids from the unguarded list endpoint and overwrite system notification titles and content, delivering attacker-supplied text or links to other users.13dCVE-2026-1086174.3 MED14.7%
——4JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMessageTemplate/add. Attackers holding only minimal roles can insert arbitrary notification templates with chosen codes and content into the shared sys_sms_template library used for system, e-mail, SMS and IM notifications.9dCVE-2026-1086165.4 MED18.9%
——6JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records. Low-privileged attackers can send comma-separated ids to DELETE /airag/extData/deleteBatch, which lacks owner or tenant checks, deleting other users' evaluator and test-tracking records.11dCVE-2026-1086155.4 MED18.9%
——6JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to delete AI evaluator records. Attackers can send DELETE requests to /airag/extData/delete with any id parameter to remove other users' AI evaluator or test-tracking records without owner or tenant checks.12dCVE-2026-1086144.3 MED15.3%
——5JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls handler that allows any authenticated user to export AI evaluator data. Low-privileged attackers can request /airag/extData/exportXls to download every user's airag_ext_data evaluator definitions and test-tracking records as an Excel workbook.13dCVE-2026-1086135.4 MED18.9%
——6JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that allows any authenticated user to publish or unpublish other users' AI applications. Low-privileged attackers can send POST requests to /airag/app/release to obtain share tokens exposing applications to anonymous chat access, or invalidate existing share links.13dCVE-2026-1086125.4 MED18.9%
——6JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates. Attackers can send a DELETE request to /airag/word/deleteBatch with comma-separated ids to permanently delete any templates in the shared library.9dCVE-2026-1086115.4 MED18.9%
——6JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates. Low-privileged attackers can send DELETE requests to /airag/word/delete with an id parameter to permanently remove any template from the shared library.11dCVE-2026-1086104.3 MED14.7%
——4JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler that allows any authenticated user to modify word templates. Low-privileged attackers can send PUT or POST requests to /airag/word/edit to overwrite shared templates that other users rely on to generate documents.12dCVE-2026-1086094.3 MED15.3%
——5JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' AI voice generation history via the userId parameter of GET /airag/voice/listByUser. Attackers who know another user's id can retrieve submitted text-to-speech input, voice settings, timestamps, and generated audio file names and paths stored in Redis.13dCVE-2026-1086084.3 MED14.7%
——4JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI voice records by supplying an arbitrary userId to DELETE /airag/voice/deleteVoiceRecord. Attackers can obtain record ids from the unchecked GET /airag/voice/listByUser endpoint and delete victims' text-to-speech history entries stored in Redis, one per request.13dCVE-2026-1086074.3 MED14.7%
——4JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI video generation records by supplying arbitrary userId values to DELETE /airag/video/deleteVideoRecord. Attackers can obtain record ids from the unchecked GET /airag/video/listByUser endpoint and delete victims' Redis-stored video history entries one record per request.9dCVE-2026-1086065.4 MED18.9%
——6JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records. Low-privileged attackers can obtain record ids from the unguarded GET /airag/ocr/list endpoint and repeatedly delete every shared OCR prompt record stored in Redis.11dCVE-2026-1086054.3 MED14.7%
——4JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates. Low-privileged attackers can send PUT requests to /airag/ocr/edit to overwrite LLM prompts in the shared airag:ocr Redis key, corrupting OCR results for all users.12dCVE-2026-97853—3.1%
——1Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service.
Decimal.round/3 builds the full result for the requested number of decimal places before the context precision (34 digits by default) is applied, so its cost grows with the places argument instead of with the size of the result. For positive places it appends places zero digits to the coefficient as a charlist before converting it to an integer, and for negative places it builds a charlist of -places zero digits. A single call such as Decimal.round(Decimal.new("1.5"), -50_000_000) allocates about 5.5 GB of memory, which can exhaust available memory and get the BEAM VM killed. The oldest releases instead loop once per decimal place, consuming CPU in proportion to places.
Any application that passes a user-supplied number of decimal places or scale to Decimal.round/2 or Decimal.round/3 without bounding it is exposed. The input limits added for CVE-2026-32686 do not cover the places argument.
This issue affects decimal: from 0.1.0 before 3.1.2.11dCVE-2026-817979.8 CRÍ23.7%
——7Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.14dCVE-2026-785359.8 CRÍ25.7%
——8Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.14dCVE-2026-785347.1 ALT3.7%
——1Unauthenticated Cross Site Scripting (XSS) in Educavo <= 3.4.2 versions.14dCVE-2026-785339.8 CRÍ25.7%
——8Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.14dCVE-2026-785327.1 ALT3.5%
——1Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions.14dCVE-2026-785319.8 CRÍ23.0%
——7Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.14dCVE-2026-785307.7 ALT33.3%
——10Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions.14dCVE-2026-785299.8 CRÍ23.0%
——7Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.14dCVE-2026-665699.8 CRÍ23.0%
——7Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.14dCVE-2026-665689.8 CRÍ24.9%
——7Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.14dCVE-2026-665679.8 CRÍ24.9%
——7Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.14dCVE-2026-665668.1 ALT19.6%
——6Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.14dCVE-2026-665659.8 CRÍ23.0%
——7Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.14dCVE-2026-665649.8 CRÍ23.0%
——7Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.14dCVE-2026-665639.8 CRÍ23.0%
——7Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.14dCVE-2026-664839.8 CRÍ23.0%
——7Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.14dCVE-2026-664829.8 CRÍ23.0%
——7Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.14d