// threat_intelligence_dashboard

Dashboard de Amenazas

Vulnerabilidades activamente explotadas según el catálogo CISA KEV (Known Exploited Vulnerabilities)

▶ ¿Cómo se calcula el nivel de amenaza global?

El nivel de amenaza global mostrado en la barra de navegación se calcula en base al número de CVEs activamente explotados publicados en el catálogo CISA KEV (Known Exploited Vulnerabilities) durante las últimas horas:

🟢 BAJA — 0 CVEs nuevos en el feed reciente
🟡 MEDIA — 1 a 2 CVEs nuevos activamente explotados
🟠 ALTA — 3 a 4 CVEs nuevos activamente explotados
🔴 CRÍTICA — 5 o más CVEs nuevos activamente explotados

Fuente: CISA Known Exploited Vulnerabilities Catalog — actualizado cada hora.

CVEs añadidos este mes

1647

Total KEV catalogados

Vendors afectados

// cves_añadidos_este_mes

CVE	Producto	Criticidad	Añadido
CVE-2026-58644	Microsoft SharePoint	CRÍTICA	2026-07-16
CVE-2026-25089	Fortinet FortiSandbox	CRÍTICA	2026-07-16
CVE-2026-39808	Fortinet FortiSandbox	CRÍTICA	2026-07-16
CVE-2026-46817	Oracle E-Business Suite	CRÍTICA	2026-07-15
CVE-2023-4346	KNX Association KNX Protocol Connection Authorization Option 1	ALTA	2026-07-15
CVE-2026-56155	Microsoft Active Directory Federation Services	ALTA	2026-07-14
CVE-2026-56164	Microsoft SharePoint Server	MEDIA	2026-07-14
CVE-2026-15409	SonicWall SMA1000 Appliances	CRÍTICA	2026-07-14
CVE-2026-15410	SonicWall SMA1000 Appliances	ALTA	2026-07-14
CVE-2008-4128	Cisco IOS	MEDIA	2026-07-13

// top_vendors_afectados

Microsoft

19

Cisco

8

Fortinet

4

Adobe

4

Oracle

3

Langflow

3

SimpleHelp

3

Ubiquiti

3

Ivanti

3

SonicWall

2

// catalogo_kev_completo

CVE ID	Producto	Descripción	CVSS	Añadido
CVE-2026-58644	Microsoft SharePoint	Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to…	CRÍTICA	2026-07-16
CVE-2026-25089	Fortinet FortiSandbox	Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that all…	CRÍTICA	2026-07-16
CVE-2026-39808	Fortinet FortiSandbox	Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to ex…	CRÍTICA	2026-07-16
CVE-2026-46817	Oracle E-Business Suite	Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker…	CRÍTICA	2026-07-15
CVE-2023-4346	KNX Association KNX Protocol Connection Authorization Option 1	KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism…	ALTA	2026-07-15
CVE-2026-56155	Microsoft Active Directory Federation Services	Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability tha…	ALTA	2026-07-14
CVE-2026-56164	Microsoft SharePoint Server	Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized …	MEDIA	2026-07-14
CVE-2026-15409	SonicWall SMA1000 Appliances	SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthentica…	CRÍTICA	2026-07-14
CVE-2026-15410	SonicWall SMA1000 Appliances	SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enab…	ALTA	2026-07-14
CVE-2008-4128	Cisco IOS	Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary c…	MEDIA	2026-07-13
CVE-2026-56291	Balbooa Forms	Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated …	CRÍTICA	2026-07-10
CVE-2026-48939	iCagenda iCagenda	iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary …	CRÍTICA	2026-07-10
CVE-2026-48908	JoomShaper SP Page Builder	JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauth…	CRÍTICA	2026-07-07
CVE-2026-55255	Langflow Langflow	Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attac…	CRÍTICA	2026-07-07
CVE-2026-56290	Joomlack Page Builder	Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via …	CRÍTICA	2026-07-07
CVE-2026-48282	Adobe ColdFusion	Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of …	CRÍTICA	2026-07-07
CVE-2026-45659	Microsoft SharePoint Server	Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attac…	ALTA	2026-07-01
CVE-2026-48558	SimpleHelp SimpleHelp	SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is…	CRÍTICA	2026-06-29
CVE-2026-12569	PTC Windchill and FlexPLM	PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attac…	CRÍTICA	2026-06-25
CVE-2026-20230	Cisco Unified Communications Manager	Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (…	ALTA	2026-06-25
CVE-2025-67038	Lantronix EDS5000	Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbitrary OS commands in…	CRÍTICA	2026-06-23
CVE-2026-34910	Ubiquiti UniFi OS	Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access t…	CRÍTICA	2026-06-23
CVE-2026-34909	Ubiquiti UniFi OS	Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the networ…	CRÍTICA	2026-06-23
CVE-2026-34908	Ubiquiti UniFi OS	Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to …	CRÍTICA	2026-06-23
CVE-2026-20253	Splunk Enterprise	Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenti…	CRÍTICA	2026-06-18

Página 1 / 66 (1647 CVEs total) Siguiente →