Actualizado a diario · fuentes oficiales
Vulnerabilidades (CVE) que se están explotando activamente, según el catálogo KEV de CISA, con severidad CVSS y probabilidad de explotación (EPSS).
CVE-2026-94127
Crítica · CVSS 9.3
en el catálogo el 22/09/2026
F5 · BIG-IP APM · CWE-122
F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution. EN
CVE-2025-39682
Crítica · CVSS 9.8
en el catálogo el 18/09/2026
Linux · Kernel · CWE-754
Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. EN
CVE-2026-76460
Crítica · CVSS 10.0
en el catálogo el 16/09/2026
Cisco · Identity Services Engine · CWE-648
Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface. EN
Evaluamos versiones, accesos e integraciones de su ERP y de la infraestructura y priorizamos las correcciones.
Fuentes: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database y FIRST EPSS. Contenido informativo; siga siempre el aviso y la corrección del fabricante.
This product uses the NVD API but is not endorsed or certified by the NVD.
Bit es una IA y puede equivocarse. No compartas contraseñas ni datos personales. Las conversaciones no se almacenan. Más información