CIBERPLANETA_
// threat_intelligence_dashboard

Dashboard de Amenazas

Vulnerabilidades activamente explotadas según el catálogo CISA KEV (Known Exploited Vulnerabilities)

▶ ¿Cómo se calcula el nivel de amenaza global?

El nivel de amenaza global mostrado en la barra de navegación se calcula en base al número de CVEs activamente explotados publicados en el catálogo CISA KEV (Known Exploited Vulnerabilities) durante las últimas horas:

  • 🟢 BAJA — 0 CVEs nuevos en el feed reciente
  • 🟡 MEDIA — 1 a 2 CVEs nuevos activamente explotados
  • 🟠 ALTA — 3 a 4 CVEs nuevos activamente explotados
  • 🔴 CRÍTICA — 5 o más CVEs nuevos activamente explotados

Fuente: CISA Known Exploited Vulnerabilities Catalog — actualizado cada hora.

0
CVEs añadidos este mes
1766
Total KEV catalogados
10
Vendors afectados

// top_vendors_afectados

Microsoft
7
Cisco
6
Linux
6
Citrix
5
Google
4
Plex
4
JFrog
4
Ivanti
3
Adobe
3
Fortinet
3

// titulares_fuentes_externas

Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
The Hacker News · 31 Oct 2026 ↗
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The Hacker News · 31 Oct 2026 ↗
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
The Hacker News · 31 Oct 2026 ↗
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
The Hacker News · 31 Oct 2026 ↗
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
The Hacker News · 30 Oct 2026 ↗
TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
The Hacker News · 30 Oct 2026 ↗
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
The Hacker News · 30 Oct 2026 ↗
Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis
The Hacker News · 30 Oct 2026 ↗
Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving
The Hacker News · 30 Oct 2026 ↗
Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
The Hacker News · 30 Oct 2026 ↗
Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
The Hacker News · 30 Oct 2026 ↗
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
The Hacker News · 30 Oct 2026 ↗

// catalogo_kev_completo

CVE ID Producto Descripción CVSS Añadido
CVE-2026-118527 Ivanti Connect Secure Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote au… — 2026-10-30
CVE-2026-111357 Ivanti Connect Secure Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local au… ALTA 2026-10-30
CVE-2026-97229 GitLab Community Edition and Enterprise Edition GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow… CRÍTICA 2026-10-29
CVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer der… ALTA 2026-10-29
CVE-2026-41709 Broadcom VMware ESX Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access… BAJA 2026-10-28
CVE-2026-46300 Linux Kernel Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification… ALTA 2026-10-28
CVE-2026-48356 Adobe Commerce and Magento Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result i… CRÍTICA 2026-10-27
CVE-2026-111497 Google Brotli Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt… CRÍTICA 2026-10-27
CVE-2026-109618 PHP Group PHP PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution. CRÍTICA 2026-10-26
CVE-2026-109619 PHP Group PHP PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution. ALTA 2026-10-26
CVE-2026-114625 Arista VeloCloud Orchestrator Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access… CRÍTICA 2026-10-23
CVE-2026-110447 Collabora Collabora Online – Built-in CODE Server Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command inject… CRÍTICA 2026-10-23
CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker… ALTA 2026-10-20
CVE-2026-96656 Plex Media Server Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to writ… ALTA 2026-10-20
CVE-2026-96655 Plex Media Server Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to… MEDIA 2026-10-20
CVE-2026-96654 Plex Media Server Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could all… MEDIA 2026-10-20
CVE-2026-96652 Plex Media Server Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X… MEDIA 2026-10-20
CVE-2026-110936 Siemens Software Center Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated lo… MEDIA 2026-10-20
CVE-2026-102764 BeyondTrust Remote Support BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attack… CRÍTICA 2026-10-16
CVE-2025-61624 Fortinet Multiple Products FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenti… MEDIA 2026-10-16
CVE-2026-21589 Atlassian Multiple Products Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira S… ALTA 2026-10-15
CVE-2026-105134 Ahsay AhsayCBS Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating syste… CRÍTICA 2026-10-14
CVE-2026-76519 Cisco Secure Email Gateway Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote… CRÍTICA 2026-10-14
CVE-2026-105133 Ahsay AhsayCBS Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentic… ALTA 2026-10-14
CVE-2026-0322 Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with netwo… ALTA 2026-10-14
Página 1 / 71 (1766 CVEs total) Siguiente →
▶
[INFO] WordPress: falla CVE-2026-119977 permite RCE durante la actualización del núcleo  ·  [INFO] CVE-2026-111357: Falta de autenticación en función crítica de Ivanti Connect Secure  ·  [INFO] CVE-2026-118527: carga de archivos por identificadores predecibles en Ivanti Connect Secure  ·  [INFO] Binance sufre un hackeo de hasta US$6.300 millones y suspende depósitos y retiros  ·  [INFO] CVE-2026-76418: denegación de servicio explotada en Cisco Secure Firewall ASA y FTD  ·  [INFO] WordPress: falla CVE-2026-119977 permite RCE durante la actualización del núcleo  ·  [INFO] CVE-2026-111357: Falta de autenticación en función crítica de Ivanti Connect Secure  ·  [INFO] CVE-2026-118527: carga de archivos por identificadores predecibles en Ivanti Connect Secure  ·  [INFO] Binance sufre un hackeo de hasta US$6.300 millones y suspende depósitos y retiros  ·  [INFO] CVE-2026-76418: denegación de servicio explotada en Cisco Secure Firewall ASA y FTD  ·