Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-95588	Aplazada	Alta (8.6)	0.34%	—	Acymailing Smtp Newsletter^AI	1/10/2026	1/10/2026	Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.
CVE-2026-94389	Aplazada	Crítica (9)	0.46%	—	Acymailing Smtp Newsletter^AI	30/9/2026	30/9/2026	Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.
CVE-2026-28182	Aplazada	Media (6.5)	0.22%	—	Acymailing Smtp Newsletter^AI	13/8/2026	14/8/2026	Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.
CVE-2026-28181	Aplazada	Media (6.5)	0.34%	—	Acymailing Smtp Newsletter^AI	13/8/2026	14/8/2026	Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.
CVE-2026-57741	Aplazada	Alta (7.1)	0.25%	—	Acymailing Newsletter Team Acymailing Smtp Newsletter^AI	13/7/2026	13/7/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Stored XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.0.
CVE-2026-57740	Aplazada	Alta (7.1)	0.32%	—	Acymailing Smtp Newsletter^AI	13/7/2026	13/7/2026	Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.1.
CVE-2026-57739	Aplazada	Crítica (9.3)	0.40%	—	Acymailing Smtp Newsletter^AI	13/7/2026	13/7/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.0.
CVE-2025-24617	Aplazada	Alta (7.1)	0.26%	—	Acymailing Newsletter Team Acymailing Smtp Newsletter^AI	14/2/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Reflected XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through < 9.11.1.