Alertas de Seguridad de la Información

M Alto vulnerabilidad

08/07/2026

[CVE-2026-49146] App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a…

App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc. ack searches up the directory hierarchy from the current directory for a project .ackrc and loads its options. The -B and -C context options accepted any positive integer, and ack sized the before-context buffer to that value, so a project .ackrc setting --before-context=100000000 …

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

08/07/2026

[CVE-2026-49147] App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames…

App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes. When ack prints a filename whose basename contains terminal control bytes such as ANSI escape sequences, those bytes reach the terminal unchanged. Version 3.10.0 added a _safe_filename helper that sanitises the filenames printed by -f, -g, the colored match heading, and pe…

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

08/07/2026

[CVE-2026-24697] An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in C…

An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The wan_hostname configuration parameter is not properly sanitized, which could allow an authenticated remote attacker to execute arbitrary OS commands with root privileges.

nvdaltovulnerabilidad CVSS 7.2 NVD

C Alto vulnerabilidad

08/07/2026

[CVE-2026-24698] An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" bi…

An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The model_name configuration parameter is not properly sanitized, which could allow an authenticated remote attacker to execute arbitrary OS commands with root privileges.

nvdaltovulnerabilidad CVSS 7.2 NVD

C Alto vulnerabilidad

08/07/2026

[CVE-2026-24699] An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco…

An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The lan_ipv6_prefixlen configuration parameter is not properly sanitized, which could allow an authenticated remote attacker to execute arbitrary OS commands with root privileges.

nvdaltovulnerabilidad CVSS 7.2 NVD

T Crítico vulnerabilidad

08/07/2026

[CVE-2026-14454] Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishan…

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.

nvdcriticovulnerabilidad CVSS 9.8 NVD

F Alto vulnerabilidad

08/07/2026

[CVE-2026-57256] When the application opens a PDF and executes JavaScript, it performs abnormal operations on the lis…

When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their internal dictionary pointers, resulting in accessing internal members of invalid or improperly initialized fields. This led…

nvdaltovulnerabilidad CVSS 7.8 NVD

F Alto vulnerabilidad

08/07/2026

[CVE-2026-57245] When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks…

When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation relationships and field combinations. This results in the internal objects entering an invalid state. Eventually, during the destruction phase, an invalid pointer write occurred, causing the application to crash.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Crítico vulnerabilidad

08/07/2026

[CVE-2026-12153] The WP Learn Manager plugin for WordPress is vulnerable to authorization bypass in all versions up t…

The WP Learn Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.8. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins from the WordPress.org repository on the vulnerable site.

nvdcriticovulnerabilidad CVSS 9.8 NVD

P Crítico vulnerabilidad

07/07/2026

[CVE-2026-14739] DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extre…

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders. DBI version 1.650 sets a hard limit of 99,999 placeholders.

nvdcriticovulnerabilidad CVSS 9.8 NVD

P Crítico vulnerabilidad

07/07/2026

[CVE-2026-14740] DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial …

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When the SQL starts with a comment line, the deletion of that line during normalisation led to an out-of-bounds read by one byte. The result is a fault on memory-hardened builds and nondeterministic newline retention on normal bu…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-14895] String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service…

String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. The trim and rtrim functions stripped trailing whitespace with s/\s*$//u. Because \s* matches greedily and the $ anchor fails whenever a non-whitespace character follows the whitespace, the regex engine retries the match at each offset of a long whitespace run, producing quadratic backtracking. T…

nvdaltovulnerabilidad CVSS 7.5 NVD

P Alto vulnerabilidad

07/07/2026

[CVE-2026-14380] DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. …

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package name. Any caller-influenced value that reaches the Profile attribute is therefore arbitrary Perl code e…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-7017] HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect target…

HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx redirect, `_maybe_redirect` follows the `Location:` header and `_prepare_headers_and_cb` re-merges the caller's `headers` argument into the new request, without checking whether the redirect target shares an origin with the original URL. Caller-supplied `Authorizati…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Crítico vulnerabilidad

07/07/2026

[CVE-2011-10043] Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Mo…

Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary code.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-11340] Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Pr…

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107.

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

06/07/2026

[CVE-2026-13705] Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SG…

Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle. read_rgb_16_rle guards each literal run with if (count > data_left), but count is a pixel count while every 16-bit sample consumes two bytes. The copy loop reads inp[0] * 256 + inp[1] and advances two bytes per pixel, so a run with data_left…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

06/07/2026

[CVE-2026-13708] Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated…

Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol. i_readjpeg_wiol walks the marker list libjpeg returns and, for each APP13 marker, allocates a new buffer with *iptc_itext = mymalloc(...) and overwrites the previous pointer without freeing it. Only the final payload is later turned into a Perl scalar and freed, s…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

06/07/2026

[CVE-2026-6382] The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4…

The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager Pro WordPress plugin before 2.1.1, File Manager WordPress plugin before 8.0.4 do not properly escape a parameter before passing it to a shell command when processing image operations, allowing authenticated users to perform OS Command Injection. This requires the server to have th…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

06/07/2026

[CVE-2026-11766] The Ultimate Member WordPress plugin before 2.12.0 does not properly sanitise and escape the value …

The Ultimate Member WordPress plugin before 2.12.0 does not properly sanitise and escape the value of custom textarea profile fields before outputting it on user profiles, allowing authenticated users with Subscriber-level access and above to store JavaScript that executes when any user, including an administrator, views the affected profile.

nvdaltovulnerabilidad CVSS 8.0 NVD