Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior

Críticas / altas1293▼ 208 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-73439	Pendiente de análisis	Alta (7.7)	0.36%	—	Arista EOS^AI Openconfig^AI Google Gnmi^AI Google Gnsi Pathz^AI	16/9/2026	17/9/2026	On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gNSI Pathz is configured and a gNSI Pathz policy is present on the system, then gNMI may fail to correctly enforce the rules in this policy if both a group rule and a user rule for the same path is…
CVE-2026-2380	Pendiente de análisis	Media (5.1)	0.25%	—	Arista EOS^AI Openconfig Gnmi^AI Openconfig Gnsi^AI Openconfig Restconf^AI+1	16/9/2026	16/9/2026	On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETCONF), sensitive requests and responses may be unintentionally logged. These may be stored on the local EOS device or recorded on remote accounting servers. Note that gRPC-based streaming via Streaming…
CVE-2012-1002	Modificada	Alta (10)	4.5%	💥 Exploit	Zakongroup Openconf	8/2/2012	16/6/2026	SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter.
CVE-2005-0407	Modificada	Media (4.3)	1.3%	—	Zakon Group Openconf	2/5/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title.