Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2565▼ 302 respecto a la semana anterior
Críticas / altas1351▲ 99 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 9.3% | — | Linksys Ea6500 Firmware | 25/10/2019 | 16/6/2026 | Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share. | |
| Modificada | Alta (7.5) | 4.0% | — | Linksys Ea3500 FirmwareLinksys Ea3500Linksys Ea6700 FirmwareLinksys Ea6700+16 | 1/11/2014 | 17/6/2026 | Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain… | |
| Modificada | Baja (3.3) | 1.2% | — | Linksys Ea4500 FirmwareLinksys Ea4500Linksys Ea6500 FirmwareLinksys Ea6500+16 | 1/11/2014 | 17/6/2026 | Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain… | |
| Modificada | Alta (7.1) | 2.1% | — | Linksys Ea6500 FirmwareLinksys Ea6500 | 29/9/2014 | 16/6/2026 | Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (clients and router configuration) via a request to /JNAP/. | |
| Modificada | Baja (3.5) | 0.78% | — | Linksys Ea6500 FirmwareLinksys Ea6500 | 29/9/2014 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section. | |
| Modificada | Media (6.8) | 1.3% | — | Linksys Ea6500 FirmwareLinksys Ea6500 | 29/9/2014 | 16/6/2026 | Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter. |