Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2558▼ 318 respecto a la semana anterior

Críticas / altas1344▲ 80 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-12766	Pendiente de análisis	Media (5.4)	0.18%	—	IBM Langflow OSS^AI	14/9/2026	16/9/2026	IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVE-2026-12765	Pendiente de análisis	Media (6.5)	0.22%	—	IBM Langflow OSS^AI	14/9/2026	16/9/2026	IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVE-2026-12763	Pendiente de análisis	Media (4.2)	0.15%	—	IBM Langflow^AI IBM Langflow OSS^AI	14/9/2026	16/9/2026	IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server context due to improper cache key isolation in the MCP Tools component.
CVE-2026-17628	Pendiente de análisis	Media (5.4)	0.34%	—	IBM Langflow OSS^AI	14/9/2026	16/9/2026	IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to change the password of an account due to improper authentication.