Alertas de Seguridad de la Información

L Alto vulnerabilidad

17/07/2026

[CVE-2026-13448] IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution …

IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( /api/v1/build_public_tmp/{flow_id}/flow ). The vulnerability stems from an incomplete denylist in the validate_public_flow_no_code_execution() function that fails to block several code-execution agent components including OpenDsStarAgent, CodeActAgen…

nvdaltovulnerabilidad CVSS 8.1 NVD

L Crítico vulnerabilidad

17/07/2026

[CVE-2026-9103] IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due …

IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. The endpoint issues long-lived superuser bearer tokens without requiring authentication when the AUTO_LOGIN configuration is enabled (enabled by default), which may allow an unauthenticated network attacker to obtain full administr…

nvdcriticovulnerabilidad CVSS 9.8 NVD

S Alto vulnerabilidad

17/07/2026

[CVE-2026-49211] Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.36.0 and 3.1.0, Symfony\UX\Auto…

Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.36.0 and 3.1.0, Symfony\UX\Autocomplete\Doctrine\EntitySearchUtil::addSearchClause() builds the LIKE expression used by the autocomplete endpoint by wrapping the client-supplied query in %...% without escaping SQL LIKE wildcards (%, _, \), allowing unauthenticated users to turn the public BaseEntityAutocompleteType endpoint into …

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

17/07/2026

[CVE-2026-13765] The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vul…

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.1 via the check_answer. This makes it possible for unauthenticated attackers to extract the correct-answer markers, full option lists, explanations, and question content for any quiz question on the site — including …

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

17/07/2026

[CVE-2026-15395] The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored C…

The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'digitalSignature' Field Value in all versions up to, and including, 2.4.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an …

nvdaltovulnerabilidad CVSS 7.2 NVD

O Alto vulnerabilidad

17/07/2026

[CVE-2026-62226] OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act…

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks.

nvdaltovulnerabilidad CVSS 8.5 NVD

O Alto vulnerabilidad

17/07/2026

[CVE-2026-62215] OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas resp…

OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that allows lower-trust callers to forge trusted A2UI actions. Attackers can perform actions requiring stronger authorization by submitting crafted requests through configured input paths, bypassing intended policy checks.

nvdaltovulnerabilidad CVSS 8.0 NVD

O Alto vulnerabilidad

17/07/2026

[CVE-2026-62218] OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair…

OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve feature that allows lower-trust callers to bypass role-management checks. Attackers can perform actions requiring stronger authorization by reaching the affected feature through configured input paths.

nvdaltovulnerabilidad CVSS 8.8 NVD

O Alto vulnerabilidad

17/07/2026

[CVE-2026-62219] OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allow…

OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allowedAgentIds validation. A lower-trust caller or configured input path can bypass agent ID restrictions by submitting blank agent IDs, allowing actions that should require stronger authorization or policy checks.

nvdaltovulnerabilidad CVSS 7.1 NVD

O Alto vulnerabilidad

17/07/2026

[CVE-2026-62207] OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-t…

OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reach admin-scoped tools. Attackers can perform actions requiring stronger authorization by exploiting insufficient policy checks on configured input paths.

nvdaltovulnerabilidad CVSS 8.8 NVD

O Alto vulnerabilidad

17/07/2026

[CVE-2026-62209] OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypass in the ClickClack…

OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypass in the ClickClack agent-mode dispatch feature, which could ignore the toolsAllow policy check. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could perform actions that should have required a stronger authorization or policy check.

nvdaltovulnerabilidad CVSS 8.1 NVD

O Alto vulnerabilidad

17/07/2026

[CVE-2026-62212] OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. W…

OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could win a timing window between the DNS validation check and use, allowing actions that should have required a stronger authorization or policy check. Practical impact depends on the operator's configu…

nvdaltovulnerabilidad CVSS 7.1 NVD

O Alto vulnerabilidad

17/07/2026

[CVE-2026-62205] OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in …

OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path can perform actions that should have required a stronger authorization or policy check. Practical impact depends on the operator's configuration and whether lower…

nvdaltovulnerabilidad CVSS 7.1 NVD

O Alto vulnerabilidad

17/07/2026

[CVE-2026-62206] OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderatio…

OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. In affected versions, a lower-trust caller or configured input path could perform moderation actions that should have required a stronger authorization or policy check. Practical impact depends on the operator's configuration and whether lower-trust input can reach the affected path.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-44435] Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server…

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 937d0e9, an assertion failure is raised when the total number of valid handshake messages received over a CRYPTO stream of a single packet number space exceeds 32KB, causing a Denial of Service. This issue has been fixed by commit 937d0e9.

nvdaltovulnerabilidad CVSS 7.5 NVD

H Alto vulnerabilidad

16/07/2026

[CVE-2026-44436] Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server…

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, Quicly is vulnerable to a Denial of Service attack through connection state corruption. In QUIC Invariants, the maximum length of a Connection ID is 255 bytes, while QUIC version 1 further restricts the maximum to 20 bytes. Quicly implements QUIC version 1 and therefore it…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-44453] h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 6b5370d, h2o is …

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 6b5370d, h2o is vulnerable to a Denial of Service attack when calling alloca under certain conditions. When serving static files, h2o builds the file path on stack, by calling alloca. The maximum size of the memory allocated using alloca can be as huge as ~600KB, which exceeds the default pthread stack size used by…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

16/07/2026

[CVE-2026-44180] Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like…

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. Versions 2.0.0rc1 and above prior to 3.3.0 have a prohibited UID and GID feature that by default prevents launching kernels with UID or GID 0 (root), and this restriction can be bypassed using a specially crafted KERNEL_UID or KERNEL_GID value. This input…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-61389] An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger k…

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.

nvdaltovulnerabilidad CVSS 7.0 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-60063] An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger k…

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.

nvdaltovulnerabilidad CVSS 7.0 NVD