Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2570▼ 305 respecto a la semana anterior

Críticas / altas1353▲ 102 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-57745	Aplazada	Alta (7.1)	0.25%	—	Stmcan Rt-theme 18^AI Stmcan Rt18-extensions^AI	13/7/2026	13/7/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows Reflected XSS.This issue affects RT-Theme 18 \| Extensions: from n/a through <= 2.5.
CVE-2026-57744	Aplazada	Crítica (9.8)	0.56%	—	Rt-theme 18 Extensions^AI	13/7/2026	13/7/2026	Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows Object Injection.This issue affects RT-Theme 18 \| Extensions: from n/a through <= 2.5.
CVE-2026-57743	Aplazada	Alta (8.1)	0.56%	—	Stmcan Rt-theme 18 Extensions^AI	13/7/2026	13/7/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows PHP Local File Inclusion.This issue affects RT-Theme 18 \| Extensions: from n/a through <= 2.5.
CVE-2026-39711	Aplazada	Media (5.3)	0.33%	—	Stmcan Rt-theme 18 Extensions^AI	8/4/2026	24/7/2026	Insertion of Sensitive Information Into Sent Data vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows Retrieve Embedded Sensitive Data.This issue affects RT-Theme 18 \| Extensions: from n/a through <= 2.5.
CVE-2026-39710	Aplazada	Media (5.4)	0.14%	—	Stmcan Rt-theme 18 Extensions^AI	8/4/2026	24/7/2026	Cross-Site Request Forgery (CSRF) vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows Cross Site Request Forgery.This issue affects RT-Theme 18 \| Extensions: from n/a through <= 2.5.
CVE-2025-32288	Aplazada	Alta (7.5)	0.56%	—	Stmcan Rt-theme 18 Extensions^AI	14/8/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows PHP Local File Inclusion.This issue affects RT-Theme 18 \| Extensions: from n/a through <= 2.4.