Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2573▼ 368 respecto a la semana anterior
Críticas / altas1324▲ 44 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)97▼ 430 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (10) | 0.91% | — | Microsoft Azure Bastion Developer | 20/11/2025 | 17/6/2026 | Azure Bastion Elevation of Privilege Vulnerability | |
| Aplazada | Media (4.4) | 0.10% | — | Wallix BastionAI | 17/9/2025 | 17/6/2026 | The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. Session-recording ttyrec files, may be handled by the provided osh-encrypt-rsync script that is a helper to rotate, encrypt, sign, copy, and optionally move them to a remote storage periodically, if configured to. When… | |
| Modificada | Alta (7.5) | 0.44% | — | Wallix BastionWallix Bastion Access Manager | 8/1/2024 | 17/6/2026 | WALLIX Bastion 7.x, 8.x, 9.x and 10.x and WALLIX Access Manager 3.x and 4.x have Incorrect Access Control which can lead to sensitive data exposure. | |
| Modificada | Media (4.6) | 0.39% | — | OVH The-bastion | 8/11/2023 | 17/6/2026 | The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins don't honor group-based JIT MFA. Establishing a SCP/SFTP connection through The Bastion via a group access where MFA is enforced does not ask for additional factor. This abnormal behavior only… | |
| Modificada | Alta (7.5) | 0.50% | — | Wallix Bastion | 23/10/2023 | 17/6/2026 | WALLIX Bastion 9.x before 9.0.9 and 10.x before 10.0.5 allows unauthenticated access to sensitive information by bypassing access control on a network access administration web interface. | |
| Modificada | Alta (7.5) | 0.76% | — | Wallix Bastion Access Manager | 9/2/2023 | 17/6/2026 | WALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information. |