Vulnerabilidades explotables hoy
406,233en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,579
- Alto21,699
- Medio20,217
- Bajo2,100
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-35689—0.6%
——0——CVE-2026-31997—0.6%
——0——CVE-2026-587396.7 MED0.6%
——0In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.44dCVE-2025-641225.5 MED0.6%
——0Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.25dCVE-2025-583044.9 MED0.6%
——0Permission control vulnerability in the file management module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.24dCVE-2024-43086—0.6%
——0——CVE-2026-538206.6 MED0.6%
——0OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path that allows authenticated callers to bypass intended command restrictions. Attackers can reach the affected bundled MCP session-spawn path to start sessions with broader command reach than intended.101dCVE-2025-27075—0.6%
——0——CVE-2026-569504.4 MED0.6%
——0In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.41dCVE-2025-21456—0.6%
——0——CVE-2025-11009—0.6%
——0——CVE-2021-39712—0.6%
——0——CVE-2022-20262—0.6%
——0——CVE-2025-48908—0.6%
——0——CVE-2025-21470—0.6%
——0——CVE-2026-159526.4 MED0.6%
——0Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600).
This issue affects Protection and control IED manager (PCM600): through 2.14.34dCVE-2023-42741—0.6%
——0——CVE-2026-26334—0.6%
——0——CVE-2022-20426—0.6%
——0——CVE-2022-22263—0.6%
——0——CVE-2026-210365.5 MED0.6%
——0Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.6dCVE-2025-27068—0.6%
——0——CVE-2026-142736.5 MED0.6%
——0IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization.17dCVE-2026-31499—0.6%
——0——CVE-2023-20798—0.6%
——0——CVE-2025-21461—0.6%
——0——CVE-2025-68960—0.6%
——0——CVE-2026-440693.9 BAJ0.6%
——0An integer underflow in the volxlate function in Netatalk 3.0.0 through 4.4.2 allows a local privileged user to obtain limited information, modify limited data, or cause a minor service disruption via crafted volume translation input.104dCVE-2025-21425—0.6%
——0——CVE-2026-43319—0.6%
——0——CVE-2022-36849—0.6%
——0——CVE-2022-38681—0.6%
——0——CVE-2022-20611—0.6%
——0——CVE-2023-21235—0.6%
——0——CVE-2023-21154—0.6%
——0——CVE-2022-20311—0.6%
——0——CVE-2025-21458—0.6%
——0——CVE-2025-32323—0.6%
——0——CVE-2026-65055.1 MED0.6%
——0The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.8dCVE-2025-0080—0.6%
——0——