Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2635▼ 211 respecto a la semana anterior

Críticas / altas1376▲ 147 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-24948	Aplazada	Alta (7.1)	0.16%	—	Cobiansoft Reflector^AI	20/2/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through <= 1.2.2.
CVE-2022-50689	Analizada	Media (6.9)	0.21%	—	Cobiansoft Reflector	22/12/2025	17/6/2026	Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the password input field. Attackers can paste a large 8000-byte buffer into the password field to trigger an application crash during SFTP task configuration.
CVE-2022-39272	Modificada	Media (4.3)	0.68%	—	Fluxcd Flux2 Fluxcd Helm-controller Fluxcd Image-automation-controller Fluxcd Image-reflector-controller+3	22/10/2022	17/6/2026	Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provide invalid data to fields `.spec.interval` or…
CVE-2018-14581	Modificada	Alta (7.8)	1.8%	—	Red-gate .net Reflector Red-gate Smartassembly	31/7/2018	17/6/2026	Redgate .NET Reflector before 10.0.7.774 and SmartAssembly before 6.12.5 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific embedded resource file.
CVE-2012-2572	Modificada	Media (4.3)	4.1%	—	Mindreantre Threewp Email Reflector	19/6/2014	16/6/2026	Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email.