Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3037▲ 502 respecto a la semana anterior

Críticas / altas1448▲ 249 respecto a la semana anterior

Nueva explotación activa (KEV)8▼ 2 respecto a la semana anterior

Sin puntuar (sin CVSS)365▲ 158 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-92133	Pendiente de análisis	Media (5.4)	0.23%	—	Jenkins Gitlab Plugin^AI	16/9/2026	18/9/2026	Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure permission to access GitLab…
CVE-2026-84664	Pendiente de análisis	Media (5.4)	0.14%	—	Jenkins Gitlab Plugin^AI	2/9/2026	3/9/2026	Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators.
CVE-2026-16049	Pendiente de análisis	Media (4.3)	0.29%	—	Mattermost^AI Mattermost Gitlab Plugin^AI	17/8/2026	18/8/2026	Mattermost Plugins versions <=11.8 10.20.11 11.5.7.0 _The Mattermost GitLab plugin fails to verify channel permissions when processing API requests with a caller-supplied_ {{post_id}}_, and fails to validate the_ {{web_url}} _parameter against the configured GitLab instance, which allows an authenticated attacker to…
CVE-2026-70444	Pendiente de análisis	Media (4.3)	0.29%	—	Jenkins Violation Comments TO Gitlab Plugin^AI	5/8/2026	31/8/2026	A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.