CIBERPLANETA_
// threat_intelligence_dashboard

Dashboard de Amenazas

Vulnerabilidades activamente explotadas según el catálogo CISA KEV (Known Exploited Vulnerabilities)

▶ ¿Cómo se calcula el nivel de amenaza global?

El nivel de amenaza global mostrado en la barra de navegación se calcula en base al número de CVEs activamente explotados publicados en el catálogo CISA KEV (Known Exploited Vulnerabilities) durante las últimas horas:

  • 🟢 BAJA — 0 CVEs nuevos en el feed reciente
  • 🟡 MEDIA — 1 a 2 CVEs nuevos activamente explotados
  • 🟠 ALTA — 3 a 4 CVEs nuevos activamente explotados
  • 🔴 CRÍTICA — 5 o más CVEs nuevos activamente explotados

Fuente: CISA Known Exploited Vulnerabilities Catalog — actualizado cada hora.

9
CVEs añadidos este mes
1739
Total KEV catalogados
10
Vendors afectados

// cves_añadidos_este_mes

CVE Producto Criticidad Añadido
CVE-2015-5477 ISC BIND ALTA 2026-10-08
CVE-2016-3081 Apache Struts ALTA 2026-10-08
CVE-2023-22894 Strapi Strapi MEDIA 2026-10-08
CVE-2021-3199 ONLYOFFICE Docs CRÍTICA 2026-10-08
CVE-2015-3306 ProFTPD ProFTPD CRÍTICA 2026-10-08
CVE-2026-88779 Citrix NetScaler ALTA 2026-10-04
CVE-2026-102490 Zammad GmbH Zammad CRÍTICA 2026-10-02
CVE-2026-102489 Zammad GmbH Zammad CRÍTICA 2026-10-02
CVE-2026-104286 Fortinet FortiMail CRÍTICA 2026-10-01

// top_vendors_afectados

Microsoft
11
Cisco
6
Citrix
5
Fortinet
5
Linux
5
JFrog
4
MikroTik
3
WordPress
3
Check Point
3
Google
3

// titulares_fuentes_externas

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
The Hacker News · 08 Oct 2026 ↗
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
The Hacker News · 08 Oct 2026 ↗
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
The Hacker News · 08 Oct 2026 ↗
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
The Hacker News · 08 Oct 2026 ↗
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
The Hacker News · 08 Oct 2026 ↗
Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
The Hacker News · 08 Oct 2026 ↗
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
The Hacker News · 08 Oct 2026 ↗
U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
The Hacker News · 08 Oct 2026 ↗
MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
The Hacker News · 08 Oct 2026 ↗
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
The Hacker News · 08 Oct 2026 ↗
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
The Hacker News · 07 Oct 2026 ↗
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
The Hacker News · 07 Oct 2026 ↗

// catalogo_kev_completo

CVE ID Producto Descripción CVSS Añadido
CVE-2015-5477 ISC BIND ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service… ALTA 2026-10-08
CVE-2016-3081 Apache Struts Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code vi… ALTA 2026-10-08
CVE-2023-22894 Strapi Strapi Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to th… MEDIA 2026-10-08
CVE-2021-3199 ONLYOFFICE Docs ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image… CRÍTICA 2026-10-08
CVE-2015-3306 ProFTPD ProFTPD ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitr… CRÍTICA 2026-10-08
CVE-2026-88779 Citrix NetScaler Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper r… ALTA 2026-10-04
CVE-2026-102490 Zammad GmbH Zammad Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to esca… CRÍTICA 2026-10-02
CVE-2026-102489 Zammad GmbH Zammad Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user.… CRÍTICA 2026-10-02
CVE-2026-104286 Fortinet FortiMail Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerabilit… CRÍTICA 2026-10-01
CVE-2026-76504 Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacke… CRÍTICA 2026-09-30
CVE-2026-86950 Apple Multiple Products Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary co… ALTA 2026-09-29
CVE-2026-88772 Citrix NetScaler Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory … ALTA 2026-09-27
CVE-2026-88771 Citrix NetScaler Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unaut… CRÍTICA 2026-09-27
CVE-2026-67279 MikroTik RouterOS Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthentic… MEDIA 2026-09-25
CVE-2026-65660 Microsoft SharePoint Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code o… ALTA 2026-09-25
CVE-2026-87902 WordPress Core WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make pag… ALTA 2026-09-25
CVE-2026-5430 WSO2 Multiple Products WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that co… CRÍTICA 2026-09-24
CVE-2026-71362 Adobe Commerce and Magento Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage t… CRÍTICA 2026-09-24
CVE-2026-93952 Arista VeloCloud Orchestrator Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote… CRÍTICA 2026-09-22
CVE-2026-94127 F5 BIG-IP APM F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configure… CRÍTICA 2026-09-22
CVE-2026-93616 Check Point Multiple Products Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, a… CRÍTICA 2026-09-22
CVE-2026-85102 Check Point Multiple Products Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an impr… CRÍTICA 2026-09-22
CVE-2026-7273 Zyxel GS1900 Series Switches Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a… ALTA 2026-09-21
CVE-2025-39964 Linux Kernel Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing d… ALTA 2026-09-18
CVE-2026-53266 Linux Kernel Linux Kernel contains an out-of-bounds write vulnerability in the ebtables SNAT target which allows an ARP sender hardw… ALTA 2026-09-18
Página 1 / 70 (1739 CVEs total) Siguiente →
▶
[INFO] CVE-2021-3199: traversal de rutas con RCE en ONLYOFFICE Docs  ·  [INFO] CVE-2015-3306: acceso arbitrario a archivos en ProFTPD  ·  [INFO] CVE-2016-3081: inyección de comandos en Apache Struts  ·  [INFO] CVE-2015-5477: denegación de servicio en ISC BIND mediante consultas TKEY  ·  [INFO] CVE-2023-22894: exposición de datos sensibles en Strapi  ·  [INFO] CVE-2021-3199: traversal de rutas con RCE en ONLYOFFICE Docs  ·  [INFO] CVE-2015-3306: acceso arbitrario a archivos en ProFTPD  ·  [INFO] CVE-2016-3081: inyección de comandos en Apache Struts  ·  [INFO] CVE-2015-5477: denegación de servicio en ISC BIND mediante consultas TKEY  ·  [INFO] CVE-2023-22894: exposición de datos sensibles en Strapi  ·