Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2025-68717

Publication date:

08/01/2026

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation. If any user is logged in, endpoints such as /cgi-bin/system-tool accept unauthenticated requests with empty or invalid session values. This design flaw lets attackers piggyback on another user&#39;s active session to retrieve sensitive configuration data or execute privileged actions without authentication.

Severity CVSS v4.0: Pending analysis

Last modification:

08/01/2026

CVE-2025-68719

Publication date:

08/01/2026

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management. Once any user is logged in and maintains an active session, an attacker can directly query the backup endpoint and download a full configuration archive. This archive contains sensitive files such as /etc/shadow, enabling credential recovery and potential full compromise of the device.

Severity CVSS v4.0: Pending analysis

Last modification:

08/01/2026

CVE-2025-68718

Publication date:

08/01/2026

KAYSUS KS-WR1200 routers with firmware 107 expose SSH and TELNET services on the LAN interface with hardcoded root credentials (root:12345678). The administrator cannot disable these services or change the hardcoded password. (Changing the management GUI password does not affect SSH/TELNET authentication.) Any LAN-adjacent attacker can trivially log in with root privileges.

Severity CVSS v4.0: Pending analysis

Last modification:

08/01/2026

CVE-2025-14505

Publication date:

08/01/2026

The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of &#39;k&#39; (as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 ) has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This happens, because the byte-length of &#39;k&#39; is incorrectly computed, resulting in its getting truncated during the computation. Legitimate transactions or communications will be broken as a result. Furthermore, due to the nature of the fault, attackers could–under certain conditions–derive the secret key, if they could get their hands on both a faulty signature generated by a vulnerable version of Elliptic and a correct signature for the same inputs.<br /> <br /> This issue affects all known versions of Elliptic (at the time of writing, versions less than or equal to 6.6.1).

Severity CVSS v4.0: Pending analysis

Last modification:

08/01/2026

CVE-2025-15464

Publication date:

08/01/2026

Exported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls.

Severity CVSS v4.0: Pending analysis

Last modification:

08/01/2026

CVE-2025-66913

Publication date:

08/01/2026

JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user-controlled H2 JDBC URLs. The application passes the attacker-supplied JDBC URL directly to the H2 driver, allowing the use of certain directives to execute arbitrary Java code. A different vulnerability than CVE-2025-10770.

Severity CVSS v4.0: Pending analysis

Last modification:

08/01/2026

CVE-2025-66916

Publication date:

08/01/2026

The snailjob component in RuoYi-Vue-Plus versions 5.5.1 and earlier, interface /snail-job/workflow/check-node-expression can execute QLExpress expressions, but it does not filter user input, allowing attackers to use the File class to perform arbitrary file reading and writing.

Severity CVSS v4.0: Pending analysis

Last modification:

08/01/2026

CVE-2025-68715

Publication date:

08/01/2026

An issue was discovered in Panda Wireless PWRU0 devices with firmware 2.2.9 that exposes multiple HTTP endpoints (/goform/setWan, /goform/setLan, /goform/wirelessBasic) that do not enforce authentication. A remote unauthenticated attacker can modify WAN, LAN, and wireless settings directly, leading to privilege escalation and denial of service.

Severity CVSS v4.0: Pending analysis

Last modification:

08/01/2026

CVE-2026-0747

Publication date:

08/01/2026

Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Manager 2025.3.24.0 through 2025.3.28.0 on Windows allows an external observer to view a password on screen via a defective masking feature, for example during physical observation or screen sharing.

Severity CVSS v4.0: Pending analysis

Last modification:

08/01/2026

CVE-2026-22256

Publication date:

08/01/2026

Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generate an file view of a folder which include a render of the current path, in which its inserted in the HTML without proper sanitation, this leads to reflected XSS using the fact that request path is decoded and normalized in the matching stage but not is inserted raw in the html view (current.path), the only constraint here is for the root path (eg. /files in the PoC example) to have a sub directory (e.g common ones styles/scripts/etc…) so that the matching return the list HTML page instead of the Not Found page. This issue has been patched in version 0.88.1.

Severity CVSS v4.0: Pending analysis

Last modification:

08/01/2026

CVE-2026-22257

Publication date:

08/01/2026

Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generates a file view of a folder without sanitizing the files or folders names, this may potentially lead to XSS in cases where a website allow the access to public files using this feature and anyone can upload a file. This issue has been patched in version 0.88.1.

Severity CVSS v4.0: Pending analysis

Last modification:

08/01/2026

CVE-2026-21860

Publication date:

08/01/2026

Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.5, Werkzeug&#39;s safe_join function allows path segments with Windows device names that have file extensions or trailing spaces. On Windows, there are special device names such as CON, AUX, etc that are implicitly present and readable in every directory. Windows still accepts them with any file extension, such as CON.txt, or trailing spaces such as CON. This issue has been patched in version 3.1.5.

Severity CVSS v4.0: MEDIUM

Last modification:

08/01/2026

Subscribe to Vulnerabilities