Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3005▼ 85 respecto a la semana anterior
Críticas / altas1403▲ 41 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8) | 0.40% | — | Tp-link Archer Ax6000 Firmware | 6/9/2023 | 17/6/2026 | Archer AX6000 firmware versions prior to 'Archer AX6000(JP)_V1_1.3.0 Build 20221208' allows a network-adjacent authenticated attacker to execute arbitrary OS commands. | |
| Modificada | Alta (8.8) | 1.2% | — | Netgear Nighthawk Ax1800 FirmwareNetgear Nighthawk Ax2400 FirmwareNetgear Nighthawk Ax3000 FirmwareNetgear Nighthawk Ax5400 Firmware+2 | 16/12/2022 | 17/6/2026 | The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user input. An unauthenticated attacker on the same network segment as the router can execute arbitrary commands on the device without authentication. | |
| Modificada | Crítica (9.8) | 1.4% | — | AsuswrtAsuswrt-merlin NEW GENAsus XT8 FirmwareAsus Tuf-ax3000 V2 Firmware+15 | 5/8/2022 | 17/6/2026 | A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability. | |
| Modificada | Media (5.3) | 0.78% | — | MI Ax6000 Firmware | 10/3/2022 | 17/6/2026 | Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing configuration. Attackers can exploit this vulnerability to download part of the files in Xiaomi Router AX6000. | |
| Modificada | Alta (7.5) | 1.2% | — | Asus Cmax6000 Firmware | 17/2/2022 | 17/6/2026 | The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from ASUS CMAX6000 v1.02.00. |