Actualizado a diario · fuentes oficiales

Radar de Seguridad

Vulnerabilidades (CVE) que se están explotando activamente, según el catálogo KEV de CISA, con severidad CVSS y probabilidad de explotación (EPSS).

34explotadas en los últimos 30 días

13críticas (CVSS ≥ 9)

0usadas en ransomware

1768en el catálogo KEV

CVE-2026-48356 Crítica · CVSS 9.3 en el catálogo el 27/10/2026

Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

Adobe · Commerce and Magento · CWE-434

Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. EN

CVE-2026-111497 Crítica · CVSS 9.2 en el catálogo el 27/10/2026

Google Brotli Unchecked Return Value Vulnerability

Google · Brotli · CWE-252, CWE-787

Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. EN

CVE-2026-21589 Crítica · CVSS 9.3 en el catálogo el 15/10/2026

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Atlassian · Multiple Products · CWE-552

Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions. EN

CVE-2026-76519 Crítica · CVSS 9.8 en el catálogo el 14/10/2026

Cisco Secure Email Gateway Relative Path Traversal Vulnerability

Cisco · Secure Email Gateway · CWE-23

Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. EN

¿Quiere saber si su entorno está expuesto?

Evaluamos versiones, accesos e integraciones de su ERP y de la infraestructura y priorizamos las correcciones.

Hablar con un especialista

Fuentes: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database y FIRST EPSS. Contenido informativo; siga siempre el aviso y la corrección del fabricante.

This product uses the NVD API but is not endorsed or certified by the NVD.