Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2622▼ 226 respecto a la semana anterior
Críticas / altas1383▲ 155 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.3) | 1.8% | — | Gl-inet A1300AIGl-inet Ax1800AIGl-inet Axt1800AIGl-inet Be1400AI+13 | 17/8/2026 | 20/8/2026 | A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. This affects an unknown part of the component Wi-Fi Timer Power-Schedule Feature. Executing a manipulation of the argument… | |
| Aplazada | Media (5.3) | 0.39% | — | Gl-inet A1300AIGl-inet Ax1800AIGl-inet Axt1800AIGl-inet Be1400AI+13 | 17/8/2026 | 20/8/2026 | A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this issue is the function ui.update_langs of the component Language Update. Performing a manipulation of the… | |
| Aplazada | Media (6.9) | 0.54% | — | Gl-inet A1300AIGl-inet Ax1800AIGl-inet Axt1800AIGl-inet Be1400AI+13 | 17/8/2026 | 20/8/2026 | A vulnerability was identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this vulnerability is the function COPY/MOVE of the component WebDAV Service. Such manipulation leads to… | |
| Aplazada | Media (5.3) | 0.51% | — | Gl-inet Mt3000AIGl-inet Mt6000AIGl-inet Be9300AIGl-inet Be3600AI+7 | 3/8/2026 | 12/8/2026 | A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.get_file_list of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer overflow. The attack may… | |
| Modificada | Crítica (9.8) | 1.1% | — | Jdcloud Ax1800 FirmwareJdcloud Ax3000 FirmwareJdcloud Ax6600 FirmwareJdcloud Be6500 Firmware+2 | 30/12/2025 | 5/7/2026 | JD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 (4.5.1.r4533 and earlier), BE6500 (4.4.1.r4308 and earlier), ER1 (4.5.1.r4518 and earlier), and ER2 (4.5.1.r4518 and earlier) contain an unauthorized remote command execution vulnerability. | |
| Aplazada | Baja (2.1) | 2.5% | — | Jdcloud Be6500AI | 25/12/2025 | 17/6/2026 | A vulnerability has been found in JD Cloud BE6500 4.4.1.r4308. This issue affects the function sub_4780 of the file /jdcapi. Such manipulation of the argument ddns_name leads to command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was… |