Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2586▼ 299 respecto a la semana anterior
Críticas / altas1355▲ 100 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
102 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 0.30% | — | Nardamiteq Upc2 Firmware | 17/12/2025 | 17/6/2026 | CSRF vulnerability in narda miteq Uplink Power Contril Unit UPC2 v.1.17 allows a remote attacker to execute arbitrary code via the Web-based management interface and specifically the /system_setup.htm, /set_clock.htm, /receiver_setup.htm, /cal.htm?..., and /channel_setup.htm endpoints | |
| Analizada | Baja (2.3) | 0.30% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 1/11/2025 | 17/6/2026 | /etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Baja (2.3) | 0.30% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 1/11/2025 | 17/6/2026 | /etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 1/11/2025 | 17/6/2026 | Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.37% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 1/11/2025 | 17/6/2026 | Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.43% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 1/11/2025 | 17/6/2026 | Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Media (6.9) | 0.37% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 31/10/2025 | 17/6/2026 | Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.22% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 31/10/2025 | 17/6/2026 | Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Media (6.9) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 31/10/2025 | 17/6/2026 | Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Baja (2.1) | 0.21% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 30/10/2025 | 17/6/2026 | Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.37% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 30/10/2025 | 17/6/2026 | Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.37% | — | Azure-access Blu-ic4 FirmwareAzure-access Blu-ic2 Firmware | 30/10/2025 | 17/6/2026 | Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.17% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 29/10/2025 | 17/6/2026 | Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.24% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 29/10/2025 | 17/6/2026 | Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.35% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 29/10/2025 | 17/6/2026 | Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 29/10/2025 | 17/6/2026 | Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.22% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 28/10/2025 | 17/6/2026 | Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 28/10/2025 | 17/6/2026 | Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 28/10/2025 | 17/6/2026 | Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | |
| Analizada | Crítica (10) | 0.48% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 28/10/2025 | 17/6/2026 | Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Media (6.9) | 0.25% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 27/10/2025 | 17/6/2026 | Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 27/10/2025 | 17/6/2026 | Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.32% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 27/10/2025 | 17/6/2026 | Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Crítica (10) | 0.34% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 26/10/2025 | 17/6/2026 | Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | |
| Analizada | Media (6.9) | 0.19% | — | Azure-access Blu-ic2 FirmwareAzure-access Blu-ic4 Firmware | 26/10/2025 | 17/6/2026 | Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. |