Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 166 respecto a la semana anterior

Críticas / altas1379▲ 45 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-41527	Pendiente de análisis	Media (6.9)	0.16%	—	KDE Kleopatra^AI	21/4/2026	17/6/2026	KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a Kleopatra user, because there is an error in the mechanism (KUniqueService) for ensuring that only one instance is running.
CVE-2025-64363	Aplazada	Alta (7.5)	0.42%	—	Seventhqueen Kleo^AI PHP^AI	31/10/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SeventhQueen Kleo kleo allows PHP Local File Inclusion.This issue affects Kleo: from n/a through < 5.5.0.
CVE-2025-39367	Aplazada	Media (5.3)	0.28%	—	Seventhqueen Kleo^AI	28/4/2025	17/6/2026	Missing Authorization vulnerability in SeventhQueen Kleo kleo.This issue affects Kleo: from n/a through < 5.4.4.
CVE-2024-56209	Aplazada	Alta (7.1)	0.28%	—	Seventhqueen Kleo^AI	31/12/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen Kleo kleo allows Reflected XSS.This issue affects Kleo: from n/a through < 5.4.4.
CVE-2020-24972	Modificada	Alta (8.8)	4.8%	—	Kleopatra Project Kleopatra Fedoraproject Fedora Opensuse Backports SLE Opensuse Leap	29/8/2020	17/6/2026	The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary DLL.