Vulnerabilidades explotables hoy
368,208en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,694
Nuevos KEV · 24H0
Exploit Today ≥ 701,631
Distribución · última ventana
- Crítico2,147
- Alto7,679
- Medio5,506
- Bajo542
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-39900—3.9%
——1——CVE-2025-39414—3.9%
——1——CVE-2025-39440—3.9%
——1——CVE-2025-39416—3.9%
——1——CVE-2026-655935.4 MED3.9%
——1n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a server-side request forgery vulnerability in the dynamic-node-parameters endpoints that lack authorization scopes. Authenticated attackers can supply absolute URLs in routing configuration to override baseURL restrictions and make the n8n server issue HTTP requests to arbitrary internal targets when SSRF protection is disabled.38dCVE-2023-53327—3.9%
——1——CVE-2026-641905.5 MED3.9%
——1In the Linux kernel, the following vulnerability has been resolved:
net: team: fix NULL pointer dereference in team_xmit during mode change
__team_change_mode() clears team->ops with memset() before restoring
safe dummy handlers via team_adjust_ops(). A concurrent team_xmit()
running under RCU on another CPU can read team->ops.transmit during
this window and call a NULL function pointer, crashing the kernel.
The race requires a mode change (CAP_NET_ADMIN) concurrent with
transmit on the team device.
BUG: kernel NULL pointer dereference, address: 0000000000000000
Oops: 0010 [#1] SMP KASAN NOPTI
RIP: 0010:0x0
Call Trace:
team_xmit (drivers/net/team/team_core.c:1853)
dev_hard_start_xmit (net/core/dev.c:3904)
__dev_queue_xmit (net/core/dev.c:4871)
packet_sendmsg (net/packet/af_packet.c:3109)
__sys_sendto (net/socket.c:2265)
The original code assumed that no ports means no traffic, so mode
changes could freely memset()/memcpy() the ops. AF_PACKET with
forced carrier breaks that assumption.
Prevent the race instead of making it safe: replace memset()/memcpy()
with per-field updates that never touch transmit or receive. Those
two handlers are managed solely by team_adjust_ops(), which already
installs dummies when tx_en_port_count == 0 (always true during mode
change since no ports are present). WRITE_ONCE/READ_ONCE prevent
store/load tearing on the handler pointers.
synchronize_net() before exit_op() drains in-flight readers that may
still reference old mode state from before port removal switched the
handlers to dummies.23dCVE-2023-53332—3.9%
——1——CVE-2025-47620—3.9%
——1——CVE-2026-5409—3.9%
——1——CVE-2025-39418—3.9%
——1——CVE-2023-53434—3.9%
——1——CVE-2025-38605—3.9%
——1——CVE-2025-39455—3.9%
——1——CVE-2026-532575.5 MED3.9%
——1In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: enforce HE/EHT cap/oper consistency
Xiang Mei reports that mac80211 could crash if eht_cap is set
but eht_oper isn't. Rather than fixing that for the individual
user(s), enforce that both HE/EHT have consistent elements.57dCVE-2025-39423—3.9%
——1——CVE-2025-24533—3.9%
——1——CVE-2024-53755—3.9%
——1——CVE-2025-13365—3.9%
——1——CVE-2025-39435—3.9%
——1——CVE-2023-53284—3.9%
——1——CVE-2023-53385—3.9%
——1——CVE-2026-5408—3.9%
——1——CVE-2025-38507—3.9%
——1——CVE-2025-46457—3.9%
——1——CVE-2026-531695.5 MED3.9%
——1In the Linux kernel, the following vulnerability has been resolved:
accel/ethosu: reject NPU_OP_RESIZE commands from userspace
NPU_OP_RESIZE is a U85-only command that the driver does not yet
implement. The existing WARN_ON(1) placeholder fires unconditionally
whenever userspace submits this command via DRM_IOCTL_ETHOSU_GEM_CREATE,
causing unbounded kernel log spam.
If panic_on_warn is set the kernel panics, giving any unprivileged user
with access to the DRM device a trivial denial-of-service primitive.
Replace the WARN_ON(1) with an explicit -EINVAL return so the ioctl
rejects the command before it reaches hardware.59dCVE-2025-24515—3.9%
——1——CVE-2025-29952—3.9%
——1——CVE-2023-53325—3.9%
——1——CVE-2025-32545—3.9%
——1——CVE-2023-53444—3.9%
——1——CVE-2026-533515.5 MED3.9%
——1In the Linux kernel, the following vulnerability has been resolved:
riscv/ptrace: Use USER_REGSET_NOTE_TYPE for REGSET_CFI
Fixes a warning while dumping core:
[54983.546369][ C7] WARNING: [!note_name] fs/binfmt_elf.c:1771 at elf_core_dump+0x910/0xf68, CPU#7: abort01/3198243dCVE-2025-604835.5 MED3.9%
——1A NULL pointer dereference in the gf_ac4_pres_b_4_back_channels_present function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.44dCVE-2025-39422—3.9%
——1——CVE-2025-39707—3.9%
——1——CVE-2026-4286—3.9%
——1——CVE-2025-32606—3.9%
——1——CVE-2021-0369—3.9%
——1——CVE-2023-53383—3.9%
——1——CVE-2025-47648—3.9%
——1——