Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
39 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (10) | 0.54% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 26/10/2025 | 17/6/2026 | Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Baja (2.1) | 0.17% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 25/10/2025 | 17/6/2026 | Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.37% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 25/10/2025 | 17/6/2026 | Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.37% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 25/10/2025 | 17/6/2026 | Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.30% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 25/10/2025 | 17/6/2026 | Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Media (6.9) | 0.30% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 25/10/2025 | 17/6/2026 | SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.22% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 25/10/2025 | 17/6/2026 | Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 24/10/2025 | 17/6/2026 | Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Media (5.2) | 0.11% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 23/10/2025 | 17/6/2026 | Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.41% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 23/10/2025 | 17/6/2026 | Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Media (5.3) | 0.21% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 21/10/2025 | 17/6/2026 | HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.19% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 20/10/2025 | 17/6/2026 | Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.26% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 17/10/2025 | 17/6/2026 | Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/json`) replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.37% | 💥 PoC | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 15/10/2025 | 17/6/2026 | Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. |