Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2819→ sin cambios respecto a la semana anterior

Críticas / altas1469▲ 239 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)83▼ 429 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-16639	Pendiente de análisis	Crítica (9.8)	0.37%	—	Drupal Internationalization Single Sign ON^AI	25/8/2026	28/8/2026	Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0.
CVE-2026-0748	Analizada	Media (5.3)	0.40%	—	Internationalization Project Internationalization	26/3/2026	17/6/2026	In the Drupal 7 Internationalization (i18n) module, the i18n_node submodule allows a user with both "Translate content" and "Administer content translations" permissions to view and attach unpublished nodes via the translation UI and its autocomplete widget. This bypasses intended access controls and discloses…
CVE-2009-0382	Modificada	Media (4.3)	1.1%	—	Drupal Internationalization	2/2/2009	16/6/2026	Unspecified vulnerability in Internationalization (i18n) Translation 5.x before 5.x-2.5, a module for Drupal, allows remote attackers with "translate node" permissions to bypass intended access restrictions and read unpublished nodes via unspecified vectors.
CVE-2008-1977	Modificada	Media (4.3)	0.71%	—	Localizer Project Localizer Internationalization Project Internationalization	27/4/2008	16/6/2026	Cross-site request forgery (CSRF) vulnerability in the Internationalization (i18n) Drupal module 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1, allows remote attackers to change node translation relationships via unspecified vectors.
CVE-2008-1976	Modificada	Media (4.3)	1.4%	—	Localizer Project Localizer Internationalization Project Internationalization	27/4/2008	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules (1) Internationalization (i18n) 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and (2) Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.