Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2619▼ 461 respecto a la semana anterior
Críticas / altas1277▼ 72 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)235▼ 274 respecto a la semana anterior
11 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.5) | 0.70% | — | O-ran-sc SMO OAMAIO-ran-sc VES CollectorAI | 17/9/2026 | 18/9/2026 | A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collector. The manipulation leads to allocation of resources. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was informed of the problem… | |
| Aplazada | Baja (2.1) | 0.52% | — | O-ran-sc SMO OAMAIO-ran-sc VES CollectorAI | 17/9/2026 | 22/9/2026 | A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of the component VES Collector. Executing a manipulation can lead to allocation of resources. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The project… | |
| Aplazada | Baja (2.1) | 0.52% | — | O-ran-sc SMO OAMAIO-ran-sc VES CollectorAI | 17/9/2026 | 18/9/2026 | A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of the component VES Collector. Performing a manipulation results in allocation of resources. The attack may be initiated remotely. The exploit has been made public and could be used. The project was… | |
| Aplazada | Baja (2.1) | 0.53% | — | O-ran-sc SMO OAMAIO-ran-sc VES CollectorAI | 17/9/2026 | 23/9/2026 | A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to the public and may be… | |
| Analizada | Crítica (9.8) | 0.58% | — | O-ran-sc Ric-plt-e2mgr | 30/4/2024 | 17/6/2026 | O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler. | |
| Analizada | Media (4.3) | 0.33% | — | O-ran-sc Ric-plt-e2mgr | 30/4/2024 | 17/6/2026 | O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler. | |
| Modificada | Alta (7.7) | 0.55% | — | O-ran-sc Ric-plt-e2mgr | 3/1/2024 | 17/6/2026 | An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to the E2Manager API component. | |
| Modificada | Alta (7.5) | 1.9% | — | O-ran-sc E2 | 1/9/2023 | 17/6/2026 | An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incorrectly initiating the messaging procedure between the E2Node and E2Term components. | |
| Modificada | Alta (7.5) | 1.4% | — | O-ran-sc RIC Message Router | 1/9/2023 | 17/6/2026 | O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device. | |
| Modificada | Alta (7.5) | 2.1% | — | O-ran-sc RIC Message Router | 28/8/2023 | 17/6/2026 | Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size component. | |
| Modificada | Alta (7.5) | 2.2% | — | O-ran-sc RIC Message Router | 28/8/2023 | 17/6/2026 | Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via a crafted packet. |