Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2847▼ 151 respecto a la semana anterior

Críticas / altas1373▲ 54 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)267▼ 257 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-28855	Aplazada	Alta (7.1)	0.39%	—	Srcoley Teleport^AI	26/3/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in srcoley Teleport teleport allows Reflected XSS.This issue affects Teleport: from n/a through <= 1.2.4.
CVE-2022-38599	Modificada	Media (6.5)	0.84%	—	Goteleport Teleport	8/12/2022	9/7/2026	Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface.
CVE-2022-36633	Modificada	Alta (8.8)	50%	—	Goteleport Teleport	24/8/2022	17/6/2026	Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a user in a social engineering attack.…
CVE-2021-41395	Modificada	Media (6.5)	0.85%	—	Goteleport Teleport	18/9/2021	17/6/2026	Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username.
CVE-2021-41394	Modificada	Media (5.3)	1.2%	—	Goteleport Teleport	18/9/2021	17/6/2026	Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows alteration of build artifacts in some situations.
CVE-2021-41393	Modificada	Crítica (9.8)	1.1%	—	Goteleport Teleport	18/9/2021	17/6/2026	Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery of SSH host certificates in some situations.
CVE-2018-19555	Modificada	Alta (8.8)	0.52%	—	Tp4a Teleport	26/11/2018	17/6/2026	tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password.
CVE-2018-19301	Modificada	Media (6.1)	0.71%	—	Tp4a Teleport	15/11/2018	17/6/2026	tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log.