Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior
Críticas / altas1367▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior
2 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (6.9) | 0.46% | — | Schneider-electric Modicon M241 FirmwareSchneider-electric Modicon M251 FirmwareSchneider-electric Modicon M262 Firmware | 10/3/2026 | 23/6/2026 | CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels. | |
| Modificada | Media (6.1) | 0.26% | — | Schneider-electric Modicon M241 FirmwareSchneider-electric Modicon M251 FirmwareSchneider-electric Modicon M258 FirmwareSchneider-electric Modicon M262 Firmware+1 | 11/7/2024 | 17/6/2026 | CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a vulnerability leading to a cross-site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload. |