Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2743▼ 518 respecto a la semana anterior
Críticas / altas1293▼ 226 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
2636 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (10) | 0.17% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 29/10/2025 | 17/6/2026 | Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.24% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 29/10/2025 | 17/6/2026 | Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.35% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 29/10/2025 | 17/6/2026 | Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 29/10/2025 | 17/6/2026 | Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.22% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 28/10/2025 | 17/6/2026 | Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 28/10/2025 | 17/6/2026 | Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 28/10/2025 | 17/6/2026 | Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.48% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 28/10/2025 | 17/6/2026 | Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Media (6.9) | 0.25% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 27/10/2025 | 17/6/2026 | Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 27/10/2025 | 17/6/2026 | Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.32% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 27/10/2025 | 17/6/2026 | Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Aplazada | Media (6.4) | 0.21% | — | Openvpn Access ServerAI | 27/10/2025 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 through 2.14.3 allows configured remote SAML Assertion Consumer Service (ACS) endpoint servers to inject arbitrary web script or HTML via the RelayState parameter | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 26/10/2025 | 17/6/2026 | Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Media (6.9) | 0.19% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 26/10/2025 | 17/6/2026 | Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Media (6.9) | 0.20% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 26/10/2025 | 17/6/2026 | Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.54% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 26/10/2025 | 17/6/2026 | Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Baja (2.1) | 0.17% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 25/10/2025 | 17/6/2026 | Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.37% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 25/10/2025 | 17/6/2026 | Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.37% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 25/10/2025 | 17/6/2026 | Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.30% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 25/10/2025 | 17/6/2026 | Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Media (6.9) | 0.30% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 25/10/2025 | 17/6/2026 | SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.22% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 25/10/2025 | 17/6/2026 | Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 24/10/2025 | 17/6/2026 | Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Media (5.2) | 0.11% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 23/10/2025 | 17/6/2026 | Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.41% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 23/10/2025 | 17/6/2026 | Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. |