Omisión de autenticación en Stela de Diaple Networking

Authentication bypass in Stela by Diaple Networking Thu, 10/15/2026 - 10:10 Aviso Affected Resources Stela, versions prior to 1.60.1. Description INCIBE has coordinated the publication of a critical severity vulnerability affecting Stela by Diaple Networking, an event and institutional management software product. The vulnerability was discovered by Xavi Márquez Gonzalez. The CVSS v4.0 base score, vector and CWE weakness type are as follows: CVE-2026-101287: CVSS v4.0: 9.3 | CVSS:4.0/AV:N/AC:L…

Číst originál na INCIBE-CERT →

CZ · EN/orig

Diaple Networking ES

tg: zranitelnost tp: identita

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-101287	9.3 4.0 · INCIBE	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.3.