Vulnerabilidades explotables hoy
29en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,685
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,258
- Alto9,252
- Medio5,224
- Bajo500
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-663845.3 MED45.3%
KEV—64JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability3dCVE-2026-533627.8 ALT41.5%
KEV—62Linux Kernel Unspecified Vulnerability2dCVE-2023-491059.8 CRÍ98.6%
KEV—80ownCloud Improper Authentication Vulnerability3dCVE-2026-84529.8 CRÍ74.1%
KEV—72Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability4dCVE-2022-09957.8 ALT95.1%
KEV—79Linux Kernel Out-of-Bounds Write Vulnerability4dCVE-2021-237588.1 ALT99.7%
KEV—80Ajax.NET Professional Deserialization of Untrusted Data Vulnerability4dCVE-2019-10688.8 ALT98.9%
KEV—80Microsoft SQL Server Remote Code Execution Vulnerability4dCVE-2015-52877.8 ALT91.6%
KEV—77Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability4dCVE-2015-32465.1 MED94.8%
KEV—78Red Hat Libuser Race Condition Vulnerability4dCVE-2026-600049.8 CRÍ99.7%
KEV—80Gitea Code Injection Vulnerability4dCVE-2026-2196210.0 CRÍ98.6%
KEV—80Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability6dCVE-2026-735708.9 ALT97.3%
KEV—79Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability7dCVE-2026-725309.0 CRÍ77.3%
KEV—73TrueConf Server Code Injection Vulnerability10dCVE-2026-725299.8 CRÍ73.4%
KEV—72TrueConf Server Missing Authentication for Critical Function Vulnerability10dCVE-2026-648499.3 CRÍ96.7%
KEV—79MLflow Server-Side Request Forgery Vulnerability10dCVE-2026-654009.8 CRÍ95.2%
KEV—79Apple macOS Improper Authentication Vulnerability12dCVE-2026-593109.8 CRÍ98.7%
KEV—80Broadcom VMware vCenter Path Traversal Vulnerability12dCVE-2026-550409.1 CRÍ98.5%
KEV—80Microsoft SharePoint Weak Authentication Vulnerability12dCVE-2026-338249.8 CRÍ99.4%
KEV—80Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability12dCVE-2025-625938.8 ALT96.8%
KEV—79Ray-Project Ray Code Injection Vulnerability13dCVE-2026-688207.0 ALT93.0%
KEV—78Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability14dCVE-2026-203498.6 ALT81.4%
KEV—74Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability19dCVE-2026-7289810.0 CRÍ99.6%
KEV—80Metabase SQL Injection Vulnerability19dCVE-2026-80379.6 CRÍ99.9%
KEV—80Progress LoadMaster Command Injection Vulnerability20dCVE-2026-630779.8 CRÍ99.7%
KEV—80JetBrains TeamCity Deserialization of Untrusted Data Vulnerability25dCVE-2026-185567.4 ALT98.5%
KEV—80N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability26dCVE-2026-91989.8 CRÍ98.3%
KEV—79IBM Langflow Code Injection Vulnerability13dCVE-2026-344867.5 ALT99.9%
KEV—80Apache Tomcat Missing Encryption of Sensitive Data Vulnerability21dCVE-2026-185778.1 ALT98.9%
KEV—80N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability27d