« Volver al listado

Pig4cloud

Pig4cloud PIG: vulnerabilidades y CVE

Pig4cloud PIG tiene 4 vulnerabilidades publicadas, 4 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE4
Últimos 12 meses4
Críticas3
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-91995Crítica (9.3)0.88%—15 sept 2026
pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint where password verification results are discarded, allowing any value as the current password. Remote attackers can…
CVE-2026-15512Baja (2.1)0.39%—13 jul 2026
A vulnerability was identified in pig-mesh Pig up to 3.9.2. Affected by this issue is some unknown functionality of the file…
CVE-2025-63691Crítica (9.6)0.36%—7 nov 2025
In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interface (/api/admin/sys-token/page) has an improper permission verification issue,…
CVE-2025-63690Crítica (9.1)0.98%—7 nov 2025
In pig-mesh Pig versions 3.8.2 and below, when setting up scheduled tasks in the Quartz management function under the system management module, it is possible to execute any Java class with a parameterless constructor…

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1078.001 Default Accounts2
  2. T1210 Exploitation of Remote Services2
  3. T1059 Command and Scripting Interpreter1
  4. T1190 Exploit Public-Facing Application1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.