Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2811▼ 173 respecto a la semana anterior

Críticas / altas1356▲ 48 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)267▼ 256 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-62132	Aplazada	Media (5.3)	0.29%	—	Masteriyo - LMS^AI	11/9/2026	11/9/2026	Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions.
CVE-2026-62107	Aplazada	Alta (8.8)	0.52%	—	Masteriyo - LMS^AI	11/9/2026	11/9/2026	Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.
CVE-2026-73996	Aplazada	Crítica (9.8)	0.52%	—	Masteriyo - LMS^AI	18/8/2026	20/8/2026	Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions.
CVE-2026-65463	Aplazada	Media (5.4)	0.29%	—	Masteriyo - LMS^AI	23/7/2026	23/7/2026	Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.
CVE-2026-42743	Aplazada	Media (6.5)	0.20%	—	Masteriyo - LMS^AI	15/6/2026	17/6/2026	Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions.
CVE-2026-39524	Aplazada	Alta (7.5)	0.35%	—	Masteriyo - LMS^AI	15/6/2026	17/6/2026	Unauthenticated Broken Access Control in Masteriyo - LMS <= 2.1.5 versions.
CVE-2026-49111	Aplazada	Alta (8.8)	0.42%	—	Themegrill Masteriyo - LMS^AI	15/6/2026	17/6/2026	Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation. This issue affects Masteriyo - LMS: from n/a through 2.2.0.
CVE-2025-64270	Aplazada	Media (6.5)	0.32%	—	Masteriyo - LMS^AI	18/12/2025	17/6/2026	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects Masteriyo - LMS: from n/a through <= 2.0.3.
CVE-2025-54699	Aplazada	Media (6.5)	0.22%	—	Masteriyo - LMS^AI	14/8/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Stored XSS.This issue affects Masteriyo - LMS: from n/a through <= 1.18.3.