Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
11 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (9.8) | 1.1% | — | Mitsubishielectric G-50AIMitsubishielectric G-50-wAIMitsubishielectric G-50aAIMitsubishielectric Gb-50AI+23 | 26/6/2025 | 17/6/2026 | Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G-50 all versions, G-50-W all versions, G-50A all versions, GB-50 all versions, GB-50A all versions, GB-24A all versions, G-150AD all versions, AG-150A-A all versions, AG-150A-J all versions, GB-50AD all versions, GB-50ADA-A… | |
| Analizada | Media (6.1) | 0.68% | — | Vonets Var1200-h FirmwareVonets Var1200-l FirmwareVonets Var600-h FirmwareVonets Vap11ac Firmware+10 | 12/8/2024 | 17/6/2026 | An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior enables an unauthenticated remote attacker to bypass authentication via a specially crafted direct request when another user has an active session. | |
| Analizada | Alta (8.7) | 1.7% | — | Vonets Var1200-h FirmwareVonets Var1200-l FirmwareVonets Var600-h FirmwareVonets Vap11ac Firmware+10 | 12/8/2024 | 17/6/2026 | A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to read arbitrary files and bypass authentication. | |
| Analizada | Crítica (9.4) | 0.77% | — | Vonets Var1200-h FirmwareVonets Var1200-l FirmwareVonets Var600-h FirmwareVonets Vap11ac Firmware+10 | 12/8/2024 | 17/6/2026 | Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to cause a denial of service. A specially-crafted HTTP request to pre-authentication resources… | |
| Analizada | Crítica (10) | 1.1% | — | Vonets Var1200-h FirmwareVonets Var1200-l FirmwareVonets Var600-h FirmwareVonets Vap11ac Firmware+10 | 12/8/2024 | 17/6/2026 | Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to execute arbitrary code. | |
| Analizada | Crítica (9.4) | 1.3% | — | Vonets Var1200-h FirmwareVonets Var1200-l FirmwareVonets Var600-h FirmwareVonets Vap11ac Firmware+10 | 12/8/2024 | 17/6/2026 | Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an authenticated remote attacker to execute arbitrary OS commands via various endpoint parameters. | |
| Analizada | Alta (8.8) | 0.80% | — | Vonets Var1200-h FirmwareVonets Var1200-l FirmwareVonets Var600-h FirmwareVonets Vap11ac Firmware+10 | 12/8/2024 | 17/6/2026 | Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication and factory reset the device via unprotected goform endpoints. | |
| Analizada | Alta (8.7) | 0.63% | — | Vonets Var1200-h FirmwareVonets Var1200-l FirmwareVonets Var600-h FirmwareVonets Vap11ac Firmware+10 | 8/8/2024 | 17/6/2026 | Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication using hard-coded administrator credentials. These accounts cannot be disabled. | |
| Modificada | Alta (7.1) | 0.85% | — | Mitsubishi G-50a FirmwareMitsubishi Gb-50a FirmwareMitsubishi Ag-150a-a FirmwareMitsubishi Ag-150a-j Firmware+15 | 13/7/2021 | 17/6/2026 | Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.2.50 to Ver. 3.35, GB-50A Ver.2.50 to Ver. 3.35, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior, GB-50ADA-J Ver.3.20 and prior, EB-50GU-A Ver… | |
| Modificada | Alta (8.2) | 1.8% | — | Mitsubishi G-50a FirmwareMitsubishi Gb-50a FirmwareMitsubishi Ag-150a-a FirmwareMitsubishi Ag-150a-j Firmware+15 | 13/7/2021 | 17/6/2026 | Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.3.35 and prior, GB-50A Ver.3.35 and prior, GB-24A Ver.9.11 and prior, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior,… | |
| Modificada | Crítica (9.8) | 9.2% | — | Xiongmaitech Ahb7008f8-h FirmwareXiongmaitech Ahb7008f4-h FirmwareXiongmaitech Ahb7008f2-h FirmwareXiongmaitech Ahb7008t-mh-v2 Firmware+132 | 20/12/2017 | 17/6/2026 | A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself… |