Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2026-103412
Publication date:
09/10/2026
Improper limitation of a pathname to a restricted directory (&amp;#39;path traversal&amp;#39;) vulnerability in Apache Camel Karavan.<br /> <br /> <br /> <br /> A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing `../` sequences caused the file content to be written outside the project directory, to any location writable by the Karavan process. An authenticated user of any role could use this to overwrite application configuration or files on the application classpath and so execute code in the Karavan container.<br /> <br /> <br /> <br /> This issue affects Apache Camel Karavan: from 3.18.0 before 4.22.1.<br /> <br /> <br /> <br /> Users are recommended to upgrade to version 4.22.1, which fixes the issue.
Severity CVSS v4.0: Pending analysis
Last modification:
09/10/2026

CVE-2026-103413
Publication date:
09/10/2026
Improper input validation vulnerability in Apache Camel Karavan.<br /> <br /> <br /> <br /> When a deployment was started, Karavan unmarshalled a project&amp;#39;s `kubernetes.yaml` and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and without pinning the target namespace. An authenticated user of any role could therefore have Karavan apply arbitrary Kubernetes resources within the reach of its service account, including pods requesting hostNetwork, hostPID, hostIPC, hostPath volumes, host ports, privileged containers, privilege escalation or added capabilities.<br /> <br /> <br /> <br /> This issue affects Apache Camel Karavan: from 4.0.0 before 4.22.1.<br /> <br /> <br /> <br /> Users are recommended to upgrade to version 4.22.1, which fixes the issue.
Severity CVSS v4.0: Pending analysis
Last modification:
09/10/2026

CVE-2026-104079
Publication date:
09/10/2026
Envira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint that allows lower-privileged authenticated users to create and publish Envira galleries without the required capabilities, because the endpoint only checks edit permissions on the source post and uses a hard-coded publish status. Attackers can also supply arbitrary caller-controlled image IDs without ownership verification to publish unauthorized content using attachments they are not authorized to use.
Severity CVSS v4.0: MEDIUM
Last modification:
09/10/2026

CVE-2026-101130
Publication date:
09/10/2026
The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, could disclose the contents of adjacent heap memory in the document&amp;#39;s text or result in an application crash.
Severity CVSS v4.0: Pending analysis
Last modification:
09/10/2026

CVE-2026-103220
Publication date:
09/10/2026
The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to an out-of-bounds read and the dereference of an untrusted pointer. A threat actor could craft an Affinity document that, when opened by a user in Affinity, could result in memory corruption or an application crash.
Severity CVSS v4.0: Pending analysis
Last modification:
09/10/2026

CVE-2026-101094
Publication date:
09/10/2026
The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, could disclose the contents of adjacent heap memory in the document&amp;#39;s text or result in an application crash.
Severity CVSS v4.0: Pending analysis
Last modification:
09/10/2026

CVE-2026-85348
Publication date:
09/10/2026
The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its settings, allowing attackers to change that setting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Severity CVSS v4.0: Pending analysis
Last modification:
09/10/2026

CVE-2026-86851
Publication date:
09/10/2026
The Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-key check before acting on request parameters on the order confirmation page, allowing unauthenticated users to change the status of arbitrary orders, store arbitrary data and notes on them, and recover their order keys.
Severity CVSS v4.0: Pending analysis
Last modification:
09/10/2026

CVE-2026-87846
Publication date:
09/10/2026
The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier&amp;#39;s waybill-deletion request for those orders using the store&amp;#39;s own stored API credentials.
Severity CVSS v4.0: Pending analysis
Last modification:
09/10/2026

CVE-2026-89235
Publication date:
09/10/2026
The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQL to the query.
Severity CVSS v4.0: Pending analysis
Last modification:
09/10/2026

CVE-2026-39779
Publication date:
09/10/2026
Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asgaros Forum: from n/a through 3.4.0.
Severity CVSS v4.0: Pending analysis
Last modification:
09/10/2026

CVE-2026-62036
Publication date:
09/10/2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in AREOI All Bootstrap Blocks all-bootstrap-blocks allows Retrieve Embedded Sensitive Data.This issue affects All Bootstrap Blocks: from n/a through 1.3.31.
Severity CVSS v4.0: Pending analysis
Last modification:
09/10/2026
Subscribe to Vulnerabilities