Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2619▼ 461 respecto a la semana anterior
Críticas / altas1277▼ 72 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)235▼ 274 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Media (4.8) | 0.42% | — | Digi Portserver TSAIDigi ONE SPAIDigi ONE SP IAAIDigi ONE IAAI | 7/7/2026 | 13/7/2026 | A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who… | |
| Aplazada | Crítica (9.4) | 0.31% | — | Digi Portserver TSAIDigi ONE SPAIDigi ONE SP IAAIDigi ONE IAAI+1 | 12/5/2025 | 17/6/2026 | Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: A specially crafted POST request to the device’s web interface may allow an unauthenticated attacker to modify configuration settings. | |
| Modificada | Alta (8.1) | 0.68% | — | Digi RealportDigi Connectport TS 8/16 FirmwareDigi Passport FirmwareDigi Connectport LTS 8/16/32 Firmware+16 | 31/8/2023 | 17/6/2026 | Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment. |