Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3069▲ 549 respecto a la semana anterior

Críticas / altas1455▲ 270 respecto a la semana anterior

Nueva explotación activa (KEV)8▼ 2 respecto a la semana anterior

Sin puntuar (sin CVSS)383▲ 176 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-88023	Analizada	Media (6.1)	0.48%	—	Mongodb PHP Library	10/9/2026	29/9/2026	Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an…
CVE-2026-81525	Analizada	Alta (8.6)	0.49%	—	Mongodb PHP Driver Mongodb PHP Library	27/8/2026	29/9/2026	The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations silently directed at a…
CVE-2024-41811	Aplazada	Baja (3.9)	0.18%	—	Icinga-php-library^AI	5/8/2024	17/6/2026	ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. (CSRF). All affected products, in any version, will be unaffected by this once `icinga-php-library` is upgraded. Version 0.10.1 includes a fix…
CVE-2007-4341	Modificada	Alta (7.5)	2.7%	—	Omnistar Lib2 PHP Library	14/8/2007	16/6/2026	PHP remote file inclusion vulnerability in adm/my_statistics.php in Omnistar Lib2 PHP 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.
CVE-2004-2590	Modificada	Alta (10)	1.9%	—	Meindlsoft Cute PHP Library	31/12/2004	16/6/2026	Unspecified vulnerability in meindlSOFT Cute PHP Library (aka cphplib) 0.46 has unknown impact and attack vectors, related to regular expressions.