Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2732▼ 549 respecto a la semana anterior
Críticas / altas1295▼ 233 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
–

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaBaja (2)20%—Dcnetworks Dcme-320 Firmware6/2/202617/6/2026
A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function apply_config of the file /function/system/basic/bridge_cfg.php of the component Web Management Backend. Performing a manipulation of the argument ip_list results in command injection. The attack is possible to be carried out remotely.…
AnalizadaCrítica (9.8)0.71%—Dcnetworks Dcme-720 FirmwareDcnetworks Dcme-320-l FirmwareDcnetworks Dcme-320 FirmwareDcnetworks Dcme-520 Firmware29/11/202417/6/2026
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist_new.php.
AnalizadaCrítica (9.8)0.71%—Dcnetworks Dcme-720 FirmwareDcnetworks Dcme-320-l FirmwareDcnetworks Dcme-320 FirmwareDcnetworks Dcme-520 Firmware29/11/202417/6/2026
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/tool/traceroute.php.
AnalizadaCrítica (9.8)0.71%—Dcnetworks Dcme-720 FirmwareDcnetworks Dcme-320-l FirmwareDcnetworks Dcme-320 FirmwareDcnetworks Dcme-520 Firmware29/11/202417/6/2026
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/mgmt_edit.php.
AnalizadaCrítica (9.8)0.71%—Dcnetworks Dcme-720 FirmwareDcnetworks Dcme-320-l FirmwareDcnetworks Dcme-320 FirmwareDcnetworks Dcme-520 Firmware29/11/202417/6/2026
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_top10.php.
AnalizadaCrítica (9.8)0.71%—Dcnetworks Dcme-720 FirmwareDcnetworks Dcme-320-l FirmwareDcnetworks Dcme-320 FirmwareDcnetworks Dcme-520 Firmware29/11/202417/6/2026
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist.php.
AnalizadaCrítica (9.8)0.75%—Dcnetworks Dcme-720 FirmwareDcnetworks Dcme-320-l FirmwareDcnetworks Dcme-320 FirmwareDcnetworks Dcme-520 Firmware29/11/202417/6/2026
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/license_update.php.
AnalizadaCrítica (9.8)1.7%—Dcnetworks Dcme-320 Firmware5/11/202417/6/2026
DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability.
AnalizadaCrítica (9.8)1.1%—Dcnetworks Dcme-320-l Firmware21/10/202417/6/2026
An issue in DCME-320-L <=9.3.2.114 allows a remote attacker to execute arbitrary code via the log_u_umount.php component.
AplazadaCrítica (9.8)15%—Beijing Digital China Cloud Technology Dcme-320AI28/8/202417/6/2026
Beijing Digital China Cloud Technology Co., Ltd. DCME-320 v.7.4.12.60 has a command execution vulnerability, which can be exploited to obtain device administrator privileges via the getVar function in the code/function/system/tool/ping.php file.
Orbitaley — Vulnerabilidades