Alertas de Seguridad de la Información

M Alto vulnerabilidad

17/09/2026

[CVE-2026-87935] The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to…

The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.15 via the admin_request_handler function. This is due to missing authorization and file type validation in the admin_request_handler function, which is reachable unauthenticated via is_admin() returning true for /wp-admin/admin-post.php. This makes it possible for unauthenticated…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-25281] Transient DOS when processing large or numerous request buffers without sufficient memory allocation…

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-25282] Transient DOS when processing unverified data from a neighboring system causes out of bound memory a…

Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.

nvdaltovulnerabilidad CVSS 7.9 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-25283] Memory Corruption when copying unverified data from an external source exceeds the allocated buffer …

Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-25284] Information Disclosure when a pointer is reused after being deallocated.

Information Disclosure when a pointer is reused after being deallocated.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-25290] Memory Corruption when validating large data buffers from external sources using addition to check b…

Memory Corruption when validating large data buffers from external sources using addition to check buffer length.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-25294] Transient DOS while parsing frame during channel usage.

Transient DOS while parsing frame during channel usage.

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-24075] Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handle…

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-24081] Transient DOS when processing a channel map with insufficient used channels and adaptive frequency h…

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-25275] Transient DOS when processing authentication frames with invalid FILS information element header len…

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-25278] Memory Corruption when processing I2C transfer requests due to a race condition between memory alloc…

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-25280] Memory corruption when processing escape handling flow with insufficient user buffer sizes.

Memory corruption when processing escape handling flow with insufficient user buffer sizes.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-24073] Memory corruption when processing decode statistics due to insufficient validation of offset against…

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-24074] Memory Corruption when processing data with large offset and length values exceeds buffer limits dur…

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2025-59607] Memory Corruption when copying large input data exceeds normal allocation limits.

Memory Corruption when copying large input data exceeds normal allocation limits.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-92838] A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The appli…

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location. If successfully exploited, an attacker with local write access to the affected directory could achieve …

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

17/09/2026

[CVE-2026-81546] The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bou…

The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threat actor could craft a Affinity document that when opened by a user in Affinity could result in arbitrary code execution.

nvdaltovulnerabilidad CVSS 7.7 NVD

M Alto vulnerabilidad

16/09/2026

[CVE-2026-61596] djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered pe…

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSocket mount and event paths but not on three other render entry points: (a) the initial HTTP GET render, (b) SPA `url_change` navigation, and (c) `{% live_ren…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

16/09/2026

[CVE-2026-92592] Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-contr…

Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun cookie with the same key and format used to validate signed redirect parameters, because the HMAC signature is not bound to its purpose (Yii's cookieValidationKey is derived from the same Craft securityKey used for signed request parameters). An authenticated, non-administrator us…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

16/09/2026

[CVE-2026-92593] Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794: the Controll…

Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794: the Controller::getPostedRedirectUrl() -> View::renderObjectTemplate() sink remained unsandboxed, and the same fix commit added a self-signing oracle in Cp::elementLabelHtml(). Because Craft/Yii HMAC tokens are not bound to a parameter name, an authenticated low-privilege control panel user with edit rights on …

nvdaltovulnerabilidad CVSS 8.8 NVD