Control de acceso inadecuado en la API REST de Hiperdino

Inadequate access control in the Hiperdino REST API Mon, 09/14/2026 - 13:27 Aviso Affected Resources Hiperdino REST API v1.0. Description INCIBE has coordinated the disclosure of a critical-severity vulnerability affecting the Hiperdino REST API, which acts as a bridge for carrying out actions automatically and in real time. The vulnerability was discovered by Jorge Ramos Santana.This vulnerability has been assigned the following code, CVSS v4.0 base score, CVSS vector and CWE vulnerability…

Číst originál na INCIBE-CERT →

CZ · EN/orig

Hiperdino obchod ES

tg: zranitelnost tp: soukromí

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-12258	9.2 4.0 · INCIBE	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.2.