Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2623▼ 237 respecto a la semana anterior
Críticas / altas1384▲ 151 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior
10 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.1) | 0.18% | — | Skygroup ReeboxAI | 25/3/2026 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Reebox reebox allows Reflected XSS.This issue affects Reebox: from n/a through < 1.4.8. | |
| Analizada | Baja (3.5) | 0.11% | — | Freebox V5 HD FirmwareFreebox V5 Crystal FirmwareFreebox V6 Revolution FirmwareFreebox Mini 4K Firmware+1 | 17/11/2025 | 17/6/2026 | Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–r3 (firmware = 4.7.x), Freebox Mini 4K (firmware = 4.7.x), and Freebox One (firmware = 4.7.x) were discovered to expose subscribers' IMSI identifiers in plaintext during the initial phase of EAP-SIM authentication over… | |
| Analizada | Media (6.9) | 0.11% | — | Pawelko Freebox V6 Agent | 28/8/2025 | 25/9/2026 | Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to intercept traffic. | |
| Modificada | Media (6.5) | 1.1% | — | Freebox ServerFreebox V5 Firmware | 19/10/2020 | 17/6/2026 | A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3. | |
| Modificada | Crítica (9.6) | 1.2% | — | Freebox Revolution FirmwareFreebox Mini FirmwareFreebox ONE FirmwareFreebox Delta Firmware+1 | 16/9/2020 | 17/6/2026 | A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3. | |
| Modificada | Crítica (9.6) | 1.00% | — | Freebox Revolution FirmwareFreebox Mini FirmwareFreebox ONE FirmwareFreebox Delta Firmware+1 | 16/9/2020 | 17/6/2026 | A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3. | |
| Modificada | Crítica (9.6) | 1.2% | — | Freebox HD Firmware | 16/9/2020 | 17/6/2026 | A DNS rebinding vulnerability in Freebox v5 before 1.5.29. | |
| Modificada | Alta (8.8) | 0.53% | — | Freebox Revolution FirmwareFreebox Mini FirmwareFreebox ONE FirmwareFreebox Delta Firmware+1 | 16/9/2020 | 17/6/2026 | A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3. | |
| Modificada | Media (6.5) | 0.79% | — | Freebox OS | 13/1/2020 | 17/6/2026 | Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation | |
| Modificada | Media (5.4) | 1.5% | — | Freebox OS | 6/1/2020 | 17/6/2026 | A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code. |