Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2860▼ 165 respecto a la semana anterior

Críticas / altas1382▲ 50 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-40742	Aplazada	Media (5.3)	0.30%	—	Neliosoftware Nelio AB Testing^AI	15/4/2026	17/6/2026	Missing Authorization vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio AB Testing: from n/a through <= 8.2.8.
CVE-2026-32573	Aplazada	Crítica (9.1)	0.54%	—	Neliosoftware Nelio AB Testing^AI	25/3/2026	17/6/2026	Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testing: from n/a through <= 8.2.7.
CVE-2026-25378	Aplazada	Alta (7.6)	0.37%	—	Neliosoftware Nelio AB Testing^AI	19/2/2026	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Blind SQL Injection.This issue affects Nelio AB Testing: from n/a through <= 8.2.4.
CVE-2025-67944	Aplazada	Crítica (9.1)	0.57%	—	Neliosoftware Nelio AB Testing^AI	22/1/2026	17/6/2026	Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testing: from n/a through <= 8.1.8.
CVE-2016-10977	Modificada	Media (6.5)	2.2%	—	Neliosoftware Nelio AB Testing	17/9/2019	17/6/2026	The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal.
CVE-2016-10927	Modificada	Crítica (10)	1.6%	—	Neliosoftware Nelio AB Testing	22/8/2019	17/6/2026	The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php.
CVE-2016-10926	Modificada	Crítica (10)	1.6%	—	Neliosoftware Nelio AB Testing	22/8/2019	17/6/2026	The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php.
CVE-2017-18547	Modificada	Alta (8.8)	0.65%	—	Neliosoftware Nelio AB Testing	16/8/2019	17/6/2026	The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.