Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2989▼ 87 respecto a la semana anterior
Críticas / altas1458▲ 97 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (8.8) | 1.9% | 💥 PoC | Xiongmai DVR NVRAIXiongmai Ahb7008t-mh-v2AIXiongmaitech Nbd7024h-pAI | 29/3/2026 | 17/6/2026 | In Sofia on Xiongmai DVR/NVR (AHB7008T-MH-V2 and NBD7024H-P) 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol (TCP port 34567) request to the NetWork.NetCommon configuration handler, because system() is used. | |
| Modificada | Crítica (9.8) | 2.3% | — | Xiongmaitech Ahb7008t-mh-v2 FirmwareXiongmaitech Ahb7804r-els FirmwareXiongmaitech Ahb7804r-mh-v2 FirmwareXiongmaitech Ahb7808r-ms-v2 Firmware+4 | 30/6/2022 | 17/6/2026 | Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205, V4.02.R11.Nat.20170301,… | |
| Modificada | Crítica (9.8) | 1.1% | — | Xiongmaitech Ahb7008t-mh-v2 FirmwareXiongmaitech Ahb7804r-els FirmwareXiongmaitech Ahb7804r-mh-v2 FirmwareXiongmaitech Ahb7808r-ms-v2 Firmware+4 | 6/4/2022 | 17/6/2026 | Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device. | |
| Modificada | Crítica (9.8) | 9.2% | — | Xiongmaitech Ahb7008f8-h FirmwareXiongmaitech Ahb7008f4-h FirmwareXiongmaitech Ahb7008f2-h FirmwareXiongmaitech Ahb7008t-mh-v2 Firmware+132 | 20/12/2017 | 17/6/2026 | A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself… |