// threat_intelligence_dashboard

Dashboard de Amenazas

Vulnerabilidades activamente explotadas según el catálogo CISA KEV (Known Exploited Vulnerabilities)

▶ ¿Cómo se calcula el nivel de amenaza global?

El nivel de amenaza global mostrado en la barra de navegación se calcula en base al número de CVEs activamente explotados publicados en el catálogo CISA KEV (Known Exploited Vulnerabilities) durante las últimas horas:

🟢 BAJA — 0 CVEs nuevos en el feed reciente
🟡 MEDIA — 1 a 2 CVEs nuevos activamente explotados
🟠 ALTA — 3 a 4 CVEs nuevos activamente explotados
🔴 CRÍTICA — 5 o más CVEs nuevos activamente explotados

Fuente: CISA Known Exploited Vulnerabilities Catalog — actualizado cada hora.

CVEs añadidos este mes

1656

Total KEV catalogados

Vendors afectados

// top_vendors_afectados

Microsoft

20

Cisco

9

Fortinet

5

Adobe

4

Langflow

3

Oracle

3

SimpleHelp

3

Ubiquiti

3

Ivanti

3

Arista

2

// titulares_fuentes_externas

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

The Hacker News · 01 Ago 2026 ↗

Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites

The Hacker News · 01 Ago 2026 ↗

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

The Hacker News · 01 Ago 2026 ↗

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

The Hacker News · 01 Ago 2026 ↗

Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk

The Hacker News · 31 Jul 2026 ↗

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

The Hacker News · 31 Jul 2026 ↗

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

The Hacker News · 31 Jul 2026 ↗

Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined

The Hacker News · 31 Jul 2026 ↗

Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw

The Hacker News · 31 Jul 2026 ↗

6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026

The Hacker News · 31 Jul 2026 ↗

Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks

The Hacker News · 31 Jul 2026 ↗

Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations

The Hacker News · 31 Jul 2026 ↗

// catalogo_kev_completo

CVE ID	Producto	Descripción	CVSS	Añadido
CVE-2024-57728	SimpleHelp SimpleHelp	SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the fi…	ALTA	2026-04-24
CVE-2024-57726	SimpleHelp SimpleHelp	SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API key…	CRÍTICA	2026-04-24
CVE-2026-39987	Marimo Marimo	Marimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to shell…	CRÍTICA	2026-04-23
CVE-2026-33825	Microsoft Defender	Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized …	ALTA	2026-04-22
CVE-2026-20122	Cisco Catalyst SD-WAN Manger	Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling …	MEDIA	2026-04-20
CVE-2026-20133	Cisco Catalyst SD-WAN Manager	Cisco Catalyst SD-WAN Manager contains an exposure of sensitive information to an unauthorized actor vulnerability that…	MEDIA	2026-04-20
CVE-2025-2749	Kentico Kentico Xperience	Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server …	ALTA	2026-04-20
CVE-2023-27351	PaperCut NG/MF	PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentica…	ALTA	2026-04-20
CVE-2025-48700	Synacor Zimbra Collaboration Suite (ZCS)	Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to ex…	MEDIA	2026-04-20
CVE-2026-20128	Cisco Catalyst SD-WAN Manager	Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authent…	ALTA	2026-04-20
CVE-2025-32975	Quest KACE Systems Management Appliance (SMA)	Quest KACE Systems Management Appliance (SMA) contains an improper authentication vulnerability that could allow attack…	CRÍTICA	2026-04-20
CVE-2024-27199	JetBrains TeamCity	JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be perfor…	ALTA	2026-04-20
CVE-2026-34197	Apache ActiveMQ	Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.	ALTA	2026-04-16
CVE-2009-0238	Microsoft Office	Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete con…	ALTA	2026-04-14
CVE-2026-32201	Microsoft SharePoint Server	Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to…	MEDIA	2026-04-14
CVE-2012-1854	Microsoft Visual Basic for Applications (VBA)	Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for r…	ALTA	2026-04-13
CVE-2025-60710	Microsoft Windows	Microsoft Windows contains a link following vulnerability that allows for privilege escalation	ALTA	2026-04-13
CVE-2023-21529	Microsoft Exchange Server	Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve…	ALTA	2026-04-13
CVE-2023-36424	Microsoft Windows	Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat …	ALTA	2026-04-13
CVE-2020-9715	Adobe Acrobat	Adobe Acrobat contains a use-after-free vulnerability that allows for code execution	ALTA	2026-04-13
CVE-2026-21643	Fortinet FortiClient EMS	Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute u…	CRÍTICA	2026-04-13
CVE-2026-34621	Adobe Acrobat and Reader	Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.	ALTA	2026-04-13
CVE-2026-1340	Ivanti Endpoint Manager Mobile (EPMM)	Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve una…	CRÍTICA	2026-04-08
CVE-2026-35616	Fortinet FortiClient EMS	Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker t…	CRÍTICA	2026-04-06
CVE-2026-3502	TrueConf Client	TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence…	ALTA	2026-04-02

← Anterior Página 4 / 67 (1656 CVEs total) Siguiente →