Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior

Críticas / altas1367▲ 28 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-75896	Aplazada	Crítica (9.1)	0.40%	—	Pardus Liderahenk^AI	26/8/2026	26/8/2026	Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5.
CVE-2026-19271	Aplazada	Alta (7.5)	0.30%	—	Pardus Liderahenk^AI	26/8/2026	26/8/2026	Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection. This issue affects Liderahenk: from 3.4.0 before 3.5.5.
CVE-2026-6508	Aplazada	Crítica (9.8)	0.25%	—	Pardus Liderahenk^AI	7/5/2026	17/6/2026	Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liderahenk: from 2.0.1 before 2.0.2.
CVE-2026-2339	Aplazada	Alta (7.5)	0.81%	—	Pardus Liderahenk^AI	10/3/2026	17/6/2026	Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection. This issue affects Liderahenk: before 3.5.1.
CVE-2025-7706	Aplazada	Media (6.1)	0.26%	—	Pardus Liderahenk^AI	17/2/2026	17/6/2026	Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion. This issue affects Liderahenk: from 3.0.0 to 3.3.1 before 3.5.0.
CVE-2021-3825	Modificada	Alta (7.5)	1.6%	—	Pardus Liderahenk	1/10/2021	17/6/2026	On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. An attacker with an access to the configurations API could get valid LDAP credentials.