Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3023▼ 71 respecto a la semana anterior
Críticas / altas1419▲ 54 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
10 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.2) | 2.1% | — | Dlink Dsl-7740c Firmware | 25/8/2025 | 17/6/2026 | D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function. | |
| Analizada | Media (6.5) | 1.4% | — | Dlink Dsl-7740c Firmware | 25/8/2025 | 17/6/2026 | D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping function. | |
| Analizada | Media (5.3) | 0.59% | — | Dlink Dsl-7740c Firmware | 25/8/2025 | 17/6/2026 | Insecure default credentials for the Adminsitrator account of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to escalate privileges via a bruteforce attack. | |
| Analizada | Media (5.3) | 0.58% | — | Dlink Dsl-7740c Firmware | 25/8/2025 | 17/6/2026 | Incorrect access control in the Maintenance module of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows authenticated attackers with low-level privileges to arbitrarily change the high-privileged account passwords and escalate privileges. | |
| Analizada | Media (5.3) | 1.7% | — | Dlink Dsl-7740c Firmware | 25/8/2025 | 17/6/2026 | A command injection vulnerability in the EXE parameter of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to execute arbitrary commands via supplying a crafted GET request. | |
| Analizada | Media (6.8) | 1.6% | — | Dlink Dsl-7740c Firmware | 25/8/2025 | 17/6/2026 | D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the traceroute6 function. | |
| Analizada | Alta (7.2) | 2.1% | — | Dlink Dsl-7740c Firmware | 25/8/2025 | 17/6/2026 | D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the backup function. | |
| Analizada | Crítica (9.8) | 0.62% | — | Dlink Dsl-7740c Firmware | 25/8/2025 | 17/6/2026 | Incorrect access control in the DELT_file.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to modify arbitrary settings within the device's XML database, including the administrator’s password. | |
| Analizada | Crítica (9.8) | 0.60% | — | Dlink Dsl-7740c Firmware | 25/8/2025 | 17/6/2026 | Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing a crafted web request. | |
| Modificada | Media (6.7) | 0.41% | — | Dlink Dsl-7740c Firmware | 22/7/2020 | 17/6/2026 | D-Link DSL-7740C does not properly validate user input, which allows an authenticated LAN user to inject arbitrary command. |