Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2865▼ 160 respecto a la semana anterior

Críticas / altas1384▲ 52 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-103470	Pendiente de análisis	Crítica (9.3)	0.26%	—	Internet2 Grouper^AI	30/9/2026	30/9/2026	In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.
CVE-2025-59714	Analizada	Media (4.9)	0.27%	—	Internet2 Grouper	19/9/2025	17/6/2026	In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.
CVE-2024-39848	Aplazada	Crítica (9.1)	0.44%	—	Internet2 Grouper^AI Internet2 Grouper FOR WEB Services^AI	29/6/2024	17/6/2026	Internet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in certain ways. This is related to internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication and the use of the UyY29r password for the M3vwHr account. This also affects "Grouper for Web Services" before 4.13.1.
CVE-2018-19794	Modificada	Media (6.1)	1.1%	—	Internet2 Grouper	3/12/2018	17/6/2026	Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter.
CVE-2014-6978	Modificada	Media (5.4)	0.27%	—	Grouperahal Karim Rahal Essoulami	16/10/2014	17/6/2026	The Karim Rahal Essoulami (aka com.karim.rahal.essoulami.lcxogeyuizteegxvnq) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.