Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3019▲ 545 respecto a la semana anterior

Críticas / altas1439▲ 265 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▲ 175 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-103442	Pendiente de análisis	Alta (7.2)	0.35%	—	Wikimedia Centralauth^AI	30/9/2026	30/9/2026	External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.
CVE-2026-103047	Pendiente de análisis	Media (6.1)	0.15%	—	Wikimedia Centralauth^AI	29/9/2026	30/9/2026	Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth extension allows Stored XSS. This issue affects Mediawiki - CentralAuth extension: before 1.46.1, 1.45.5, 1.43.10.
CVE-2026-100244	Pendiente de análisis	Alta (7.5)	0.26%	—	Wikimedia Centralauth^AI	29/9/2026	30/9/2026	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Excavation. This issue affects Mediawiki - CentralAuth Extension: from * before 1.46.1, 1.45.5, 1.43.10.
CVE-2026-39937	Pendiente de análisis	Alta (8.8)	0.45%	—	Wikimedia Mediawiki Centralauth Extension^AI	7/4/2026	21/7/2026	Improper removal of sensitive information before storage or transfer vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure. The issue has been remediated on the `master` branch, and in the release branches for MediaWiki versions 1.43, 1.44, and 1.45.
CVE-2025-62669	Aplazada	Media (6.9)	0.44%	—	Wikimedia Mediawiki Centralauth Extension^AI	18/10/2025	17/6/2026	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.This issue affects Mediawiki - CentralAuth Extension: from master before 1.39.
CVE-2025-6926	Aplazada	Alta (8.8)	0.44%	—	Wikimedia Mediawiki Centralauth Extension^AI	3/7/2025	17/6/2026	Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
CVE-2013-4304	Modificada	Alta (7.5)	2.1%	—	Brion Vibber Centralauth Extension Mediawiki	26/1/2014	16/6/2026	The CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 caches a valid CentralAuthUser object in the centralauth_User cookie even when a user has not successfully logged in, which allows remote attackers to bypass authentication without a password.