Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada hace 35 min

Buscando: "Drupal" — 7 resultados ✕ Limpiar búsqueda

22,093

Total alertas

4671

Críticas

16834

Altas

8

Ransomware

1009

Esta semana

RSS

Vulnerabilidades × Crítica × Limpiar todo ×

M Crítico vulnerabilidad

[CVE-2026-73475] Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue…

Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3.

M Crítico vulnerabilidad

[CVE-2026-16639] Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalizatio…

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0.

M Crítico vulnerabilidad

[CVE-2026-15089] vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest regis…

vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest registration versions: *.*.

M Crítico vulnerabilidad

[CVE-2026-11913] vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*.

vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*.

M Crítico vulnerabilidad

[CVE-2026-12535] Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup…

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Formatter Field allows Object Injection. This issue affects Formatter Field versions: from 0.0.0 to 2.0.0.

M Crítico vulnerabilidad

[CVE-2026-10768] Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This issu…

Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This issue affects LocalGov Workflows versions: from 0.0.0 to 1.6.0.

M Crítico vulnerabilidad

[CVE-2026-9726] Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup…

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce (Basket) allows Object Injection. This issue affects Drupal AlternativeCommerce (Basket) versions: from 0.0.0 to 2.1.17.