Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2564▼ 303 respecto a la semana anterior

Críticas / altas1351▲ 100 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-70432	Pendiente de análisis	Alta (8.8)	0.30%	—	Jenkins Multijob Plugin^AI	5/8/2026	31/8/2026	A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM.
CVE-2026-70431	Pendiente de análisis	Alta (8.8)	0.64%	—	Jenkins Multijob Plugin^AI Jenkins Script Security Plugin^AI	5/8/2026	31/8/2026	Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.
CVE-2026-9674	Analizada	Media (4.3)	0.25%	—	Jenkins Multijob	27/5/2026	17/6/2026	A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds.
CVE-2017-1000390	Modificada	Media (4.3)	0.70%	—	Jenkins Multijob	26/1/2018	17/6/2026	Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build.