Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2563▼ 389 respecto a la semana anterior

Críticas / altas1328▲ 46 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)59▼ 468 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-25464	Aplazada	Alta (8.1)	0.56%	—	Tielabs Jannah^AI PHP^AI	25/3/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <= 7.6.4.
CVE-2025-64207	Aplazada	Alta (7.1)	0.22%	—	Tielabs Jannah^AI	18/12/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah jannah allows DOM-Based XSS.This issue affects Jannah: from n/a through <= 7.6.0.
CVE-2025-64206	Aplazada	Crítica (9.8)	0.47%	—	Tielabs Jannah^AI	18/12/2025	17/6/2026	Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through <= 7.6.0.
CVE-2025-64205	Aplazada	Alta (8.1)	0.40%	—	Tielabs Jannah^AI PHP^AI	18/12/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <= 7.6.0.
CVE-2025-64208	Aplazada	Media (6.5)	0.17%	—	Tielabs Jannah Extensions^AI	29/10/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through <= 1.1.4.
CVE-2025-53334	Aplazada	Alta (8.1)	0.42%	—	Tielabs Jannah^AI	28/8/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through < 7.5.1.
CVE-2021-24407	Modificada	Media (6.1)	2.6%	—	Tielabs Jannah	6/7/2021	17/6/2026	The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.
CVE-2021-24364	Modificada	Media (6.1)	2.0%	—	Tielabs Jannah	21/6/2021	17/6/2026	The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tie_get_user_weather AJAX action before outputting it back in the page, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.