Ramas de versiones afectadas
Vulnerabilidades conocidas
| CVE | Título | Versiones afectadas | CVSS | Explotada | EPSS | Publicación |
|---|---|---|---|---|---|---|
| CVE-2026-63663 | CloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream Access | * | 6.5 | — | 2026-11-07 | |
| CVE-2026-63664 | CloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction Bypass | * | 6.5 | — | 2026-11-07 | |
| CVE-2026-55449 | CloudBeaver: Path Traversal in Resource Manager getProjectPath allows directory enumeration outside shared-pro... | * | 5.3 | — | 2026-11-07 | |
| CVE-2026-108745 | CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value Servlet | ≤ 25.3.5 | 2.3 | — | 2026-10-11 | |
| CVE-2026-108742 | CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL Mutation | ≤ 25.3.5 | 5.3 | — | 2026-10-11 |
Controla estas versiones en tus propios servidores
InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.
Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).