Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2623▼ 306 respecto a la semana anterior

Críticas / altas1347▲ 75 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 463 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-12265	Pendiente de análisis	Alta (8.8)	0.88%	—	Zohocorp Manageengine DDI Central^AI	28/9/2026	29/9/2026	Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations.
CVE-2026-12264	Pendiente de análisis	Alta (8.8)	2.0%	—	Zohocorp Manageengine DDI Central^AI	28/9/2026	29/9/2026	Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution.
CVE-2026-12269	Pendiente de análisis	Alta (8.8)	7.0%	—	Zohocorp Manageengine DDI Central^AI	28/9/2026	29/9/2026	Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI Central host.
CVE-2024-5471	Modificada	Crítica (9.8)	2.5%	—	Zohocorp Manageengine DDI Central	17/7/2024	17/6/2026	Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys.
CVE-2024-27311	Modificada	Alta (8.8)	1.5%	—	Zohocorp Manageengine DDI Central	17/7/2024	17/6/2026	Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.