Alertas de Seguridad de la Información

M Alto vulnerabilidad

07/10/2026

[CVE-2026-106164] In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, a…

In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-96335] Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured …

Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-107214] Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 t…

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch performs insufficient structural and parameter validation before standard and agile decryptors slice, index, allocate, and divide using attacker-controlled values. Decrypt passes attacker-controlled EncryptionInfo and EncryptedPackage data into standardDecrypt or ag…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-107215] Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 t…

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory entry streamSize for EncryptionInfo and EncryptedPackage allocations before validating the stream. When a…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-107216] Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 t…

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls CalcCellValue instead of cellResolver, so each recursive hop receives a new calcContext and loses cycle st…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-107212] Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 t…

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ahead row number above TotalRows without applying the limit enforced by Rows.Next. File.GetRows relies on Rows.Next and Rows.Columns, but Rows.Columns consumes the row r attribute without the limit check in Rows.Next. When a crafted worksheet places an oversized…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-94662] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Stored XSS. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.19.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-94670] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through 3.6.1.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-95534] Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Element…

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.19.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-95595] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fontsplugin Disable and Remove Google Fonts | GDPR & DSGVO friendly disable-remove-google-fonts allows Reflected XSS. This issue affects Disable and Remove Google Fonts | GDPR & DSGVO friendly: from n/a through 2.0.2.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-76484] As part of Cisco's ongoing commitment to proactive security and product quality, the engineering tea…

As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-202…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-76470] As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networkin…

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76470 are related to incorrect calculation issues that are grouped…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-76472] As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networkin…

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-76472 are related to issues with improper neutralization of special elemen…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-76467] As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networkin…

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76467 are related to issues concerning improper control of a resou…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-76468] As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networkin…

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76468 are related to improper input validation that are grouped un…

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-76469] As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networkin…

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76469 are related to insufficient control flow management issues th…

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-76457] As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS eng…

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76457 are related to out-of-bounds read issues that are grouped under t…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-76458] As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS eng…

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76458 are related to improper handling of exceptional conditions issues…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-76459] As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS eng…

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76459 are related to out-of-bounds write issues that are grouped under …

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

07/10/2026

[CVE-2026-76463] As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networkin…

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76463 are related to improper access control issues that are group…

nvdaltovulnerabilidad CVSS 8.8 NVD