Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior
Críticas / altas1367▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.3) | 0.82% | — | Commscope Ruckus Smartzone FirmwareCommscope Ruckus Network Director | 4/8/2025 | 17/6/2026 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files. | |
| Modificada | Alta (8.8) | 2.1% | — | Commscope Ruckus Smartzone FirmwareCommscope Ruckus Network Director | 4/8/2025 | 17/6/2026 | In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user. | |
| Modificada | Alta (8.8) | 1.8% | — | Commscope Ruckus Smartzone FirmwareCommscope Ruckus Network Director | 4/8/2025 | 17/6/2026 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route. | |
| Modificada | Alta (8.8) | 0.98% | — | Commscope Ruckus Smartzone FirmwareCommscope Ruckus Network Director | 4/8/2025 | 17/6/2026 | Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers. | |
| Analizada | Crítica (9.8) | 0.73% | — | Commscope Ruckus Smartzone Firmware | 4/8/2025 | 17/6/2026 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account. | |
| Modificada | Media (6.1) | 0.41% | — | Ruckuswireless R750 FirmwareRuckuswireless R650 FirmwareRuckuswireless R730 FirmwareRuckuswireless T750 Firmware+33 | 7/12/2023 | 17/6/2026 | A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information… | |
| Analizada | Crítica (9.8) | 98% | ⚠ Explotación activa | Ruckuswireless Ruckus Wireless AdminRuckuswireless Smartzone APCommscope Ruckus Smartzone Firmware | 13/2/2023 | 17/6/2026 | Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring. |