Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior

Críticas / altas1415▲ 65 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-47301	Analizada	Alta (8.8)	0.78%	💥 PoC	Microsoft Configuration Manager 2503 Microsoft Configuration Manager 2509 Microsoft Configuration Manager 2603	14/7/2026	30/7/2026	Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
CVE-2025-47179	Analizada	Media (6.7)	0.35%	—	Microsoft Configuration Manager 2403 Microsoft Configuration Manager 2409 Microsoft Configuration Manager 2503	11/11/2025	17/6/2026	Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-59501	Analizada	Media (4.8)	3.3%	💥 PoC	Microsoft Configuration Manager 2403 Microsoft Configuration Manager 2409 Microsoft Configuration Manager 2503	31/10/2025	17/6/2026	Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
CVE-2025-59213	Modificada	Alta (8.8)	0.37%	💥 PoC	Microsoft Configuration Manager 2403 Microsoft Configuration Manager 2409 Microsoft Configuration Manager 2503	14/10/2025	17/6/2026	Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2025-55320	Modificada	Media (6.8)	0.68%	💥 PoC	Microsoft Configuration Manager 2403 Microsoft Configuration Manager 2409 Microsoft Configuration Manager 2503	14/10/2025	17/6/2026	Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2025-47178	Analizada	Alta (8)	2.7%	💥 PoC	Microsoft Configuration Manager 2503	8/7/2025	17/6/2026	Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network.
CVE-2024-43468	Analizada	Crítica (9.8)	81%	⚠ Explotación activa💥 PoC	Microsoft Configuration Manager 2403 Microsoft Configuration Manager 2409 Microsoft Configuration Manager 2503	8/10/2024	17/6/2026	Microsoft Configuration Manager Remote Code Execution Vulnerability