Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2614▼ 473 respecto a la semana anterior
Críticas / altas1270▼ 74 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)243▼ 274 respecto a la semana anterior
10 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (10) | 13% | — | Engeniustech Esr300 FirmwareEngeniustech Esr350 FirmwareEngeniustech Esr600 FirmwareEngeniustech Esr900 Firmware+3 | 24/6/2025 | 17/6/2026 | An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands. The injected commands are executed with… | |
| Modificada | Media (4.9) | 0.28% | — | Schneider-electric Eb450 FirmwareSchneider-electric Eb45e FirmwareSchneider-electric Eh450 FirmwareSchneider-electric Eh45e Firmware+12 | 14/12/2023 | 17/6/2026 | A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmware. | |
| Modificada | Media (6.1) | 0.42% | — | Schneider-electric Eb450 FirmwareSchneider-electric Eb45e FirmwareSchneider-electric Eh450 FirmwareSchneider-electric Eh45e Firmware+12 | 14/12/2023 | 17/6/2026 | A CWE-601:URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability exists that could cause disclosure of information through phishing attempts over HTTP. | |
| Modificada | Alta (7.5) | 1.2% | — | Cradlepoint Ibr600c FirmwareCradlepoint Ibr600 FirmwareCradlepoint Ibr900 Firmware | 7/11/2021 | 17/6/2026 | Cradlepoint IBR900-600 devices running versions < 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line. | |
| Modificada | Alta (8.8) | 0.75% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6100 FirmwareNetgear D7800 Firmware+11 | 28/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D7800 before 1.0.1.30, EX2700 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000… | |
| Modificada | Alta (8.8) | 0.66% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D7800 FirmwareNetgear Ex2700 Firmware+10 | 28/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, EX2700 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52,… | |
| Modificada | Alta (8.8) | 0.73% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D7800 FirmwareNetgear Ex2700 Firmware+10 | 28/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, EX2700 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before… | |
| Modificada | Alta (8.8) | 0.66% | — | Netgear D7800 FirmwareNetgear Ex2700 FirmwareNetgear R6100 FirmwareNetgear R7500 Firmware+8 | 28/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.30, EX2700 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.20, WN3000RPv3… | |
| Modificada | Alta (8.8) | 0.78% | — | Netgear D7800 FirmwareNetgear Ex2700 FirmwareNetgear R6100 FirmwareNetgear R7500 Firmware+8 | 28/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.30, EX2700 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.20, WN3000RPv3… | |
| Modificada | Alta (9.3) | 1.3% | — | Schneider-electric Tburjr900Schneider-electric Tburjr900 Firmware | 28/8/2013 | 16/6/2026 | Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another… |