Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2635▼ 214 respecto a la semana anterior

Críticas / altas1385▲ 153 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-9229	Aplazada	Media (5.3)	0.29%	—	Mobile-industrial-robots MIR Software^AI	20/8/2025	17/6/2026	Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file paths and other data, via access to verbose error pages.
CVE-2025-9228	Aplazada	Media (4.3)	0.21%	—	MIR Software^AI	20/8/2025	17/6/2026	MiR software versions prior to version 3.0.0 have insufficient authorization controls when creating text notes, allowing low-privilege users to create notes which are intended only for administrative users.
CVE-2025-9225	Aplazada	Media (5.5)	0.26%	—	MIR Software^AI MIR Fleet^AI	20/8/2025	17/6/2026	Stored cross-site scripting (XSS) in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victim’s browser
CVE-2025-8749	Aplazada	Media (6.5)	0.40%	—	Mobile-industrial-robots MIR Software^AI	8/8/2025	17/6/2026	Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots (MiR) Software Versions prior to 3.0.0 on MiR Robots allows authenticated users to extract files from the robot file system via a crafted API request.
CVE-2025-8748	Aplazada	Alta (8.8)	1.3%	—	MIR Software^AI	8/8/2025	17/6/2026	MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execution of arbitrary commands on the underlying operating system.