Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior
Críticas / altas1284▼ 85 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
35 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.3% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account. | |
| Modificada | Media (5.3) | 0.57% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key. | |
| Modificada | Media (5.3) | 0.57% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_instances_for_update API. | |
| Modificada | Media (5.3) | 0.57% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API. | |
| Modificada | Media (5.3) | 0.58% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API. | |
| Modificada | Media (5.3) | 0.56% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user API. | |
| Modificada | Alta (7.5) | 1.1% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API. | |
| Modificada | Alta (7.5) | 0.74% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess/TR69/Handlers/turbolink/sshkeys/id_rsa SSH key. | |
| Modificada | Media (6.1) | 0.71% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handle_campaign_script_link?script_name= XSS. | |
| Modificada | Media (5.3) | 0.76% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /cnr requests. | |
| Modificada | Media (5.3) | 0.79% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /registerCpe requests. | |
| Modificada | Media (5.3) | 0.78% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log/axxmpp.log file. | |
| Modificada | Media (5.3) | 0.95% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL "select * from Administrator_users" and "select * from Users_users" requests. | |
| Modificada | Crítica (9.8) | 0.89% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions. | |
| Modificada | Crítica (9.8) | 0.89% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRET_KEY in /opt/axess/etc/default/axess. | |
| Modificada | Media (5.3) | 0.57% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP_KEY in /opt/axess/etc/default/axess. | |
| Modificada | Media (5.3) | 0.85% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions. | |
| Modificada | Media (5.3) | 0.85% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions. | |
| Modificada | Alta (7.5) | 0.96% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication. | |
| Modificada | Media (5.3) | 0.53% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem. | |
| Modificada | Media (5.3) | 0.57% | — | Zyxel Cloudcnm Secumanager | 29/9/2022 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication. | |
| Modificada | Crítica (9.8) | 1.3% | — | Zyxel Cloudcnm Secumanager | 29/6/2020 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account default credentials. | |
| Modificada | Crítica (9.8) | 1.3% | — | Zyxel Cloudcnm Secumanager | 29/6/2020 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account. | |
| Modificada | Crítica (9.8) | 1.3% | — | Zyxel Cloudcnm Secumanager | 29/6/2020 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account. | |
| Modificada | Crítica (9.8) | 1.3% | — | Zyxel Cloudcnm Secumanager | 29/6/2020 | 17/6/2026 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account. |