Alertas de Seguridad de la Información

M Alto vulnerabilidad

25/06/2026

[CVE-2026-38640] A reachable unwrap in the __assert_fail function (/assert/mod.rs) of relibc commit 61f42d allows att…

A reachable unwrap in the __assert_fail function (/assert/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted string.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

25/06/2026

[CVE-2026-56445] The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datase…

The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datasets directly in os.path.join() without sanitization, allowing file writes to arbitrary paths.

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-38637] An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to…

An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted input.

nvdaltovulnerabilidad CVSS 7.5 NVD

B Alto vulnerabilidad

25/06/2026

[CVE-2026-57520] Bitwarden Server before 2026.5.0 contains a privilege escalation vulnerability that allows authentic…

Bitwarden Server before 2026.5.0 contains a privilege escalation vulnerability that allows authenticated Custom users with ManageUsers permission to remove Admin accounts from an organization by exploiting a missing role hierarchy check in the bulk user-remove endpoint. Attackers can supply Admin organization-user IDs in a bulk DELETE request to bypass the guard enforced on the single-user removal…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-46601] The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas …

The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-46602] The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious o…

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption.

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-10512] The X25519 x86_64 assembly implementation fails to clear the most significant bit during the final m…

The X25519 x86_64 assembly implementation fails to clear the most significant bit during the final modular reduction, so the computed result may not be fully reduced modulo the field prime 2^255 - 19. This can leave the field element in a non-canonical form, producing an incorrect result from the scalar multiplication and potentially a wrong shared secret. The final carry-propagation chains in the…

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-12340] Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificat…

Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of the public key without checking that the key is at least that long. A public key shorter than 65 bytes results in an out-of-bounds heap read, leading to a potential crash (denial of service); there is …

nvdaltovulnerabilidad CVSS 7.5 NVD

G Alto vulnerabilidad

25/06/2026

[CVE-2025-60464] A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Proje…

A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-2 TS file.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-56790] CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the …

CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the searchForPgn() function in analyzer/pgn.c that allows remote attackers to crash the application. Attackers can deliver a crafted NMEA-2000 message with an out-of-range PGN value over CAN bus or N2K-over-IP to trigger an out-of-bounds array access and denial of service.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-56771] NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the add_url e…

NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the add_url endpoint that allows authenticated users to make arbitrary server requests to internal networks by failing to filter private IP addresses. Attackers can exploit this to access localhost services and cloud metadata endpoints, enabling internal network scanning and sensitive data exfiltration.

nvdaltovulnerabilidad CVSS 8.5 NVD

S Crítico vulnerabilidad

25/06/2026

[CVE-2026-54917] SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables.…

SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables. Prior to 4.30, the S3 API gateway and the Iceberg REST catalog gateway construct their routers with mux.NewRouter().SkipClean(true). With path cleaning disabled, a .. segment inside the URL survives routing, so a request such as `GET /bucket-A/../evil-bucket/key`, is matched as bucket=bucket-A, obj…

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-53925] Glances is an open-source system cross-platform monitoring tool. From 4.0.8 until 4.5.5, the secure_…

Glances is an open-source system cross-platform monitoring tool. From 4.0.8 until 4.5.5, the secure_popen() function in glances/secure.py interprets > (file redirection), | (pipe), and && (command chaining) operators in command strings. These operators are applied without any validation on the target file path, piped command, or chained command. When Application Monitoring Process (AMP) modules lo…

nvdaltovulnerabilidad CVSS 7.8 NVD

A Crítico vulnerabilidad

25/06/2026

[CVE-2026-50549] Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal comm…

Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default. Before a Write, the agent canonicalizes the target path to confirm it stays inside the workspace, but when canonicalization fails it falls back to the original path and writes without approval. A malicious agent can create an in-workspace symlink that points outside the…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-46606] Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances KVM/QEM…

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances KVM/QEMU monitoring engine (glances/plugins/vms/engines/virsh.py) passes VM domain names, read directly from virsh list --all output, into f-string command templates that are processed by secure_popen(). secure_popen() is explicitly designed to interpret &&, |, and > as shell operators. Because domain name…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-46607] Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py…

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load() to read a version-check cache file stored at a predictable, world-accessible path (~/.cache/glances/glances-version.db or $XDG_CACHE_HOME/glances/glances-version.db). No integrity check, signature verification, or format validation is performed before deserialization. An attacker…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-46608] Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances XML-RPC…

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances XML-RPC server (glances -s) introduced a configurable CORS origin list in version 4.5.3 as a mitigation for CVE-2026-33533. However, the implementation silently falls back to Access-Control-Allow-Origin: * whenever cors_origins contains more than one entry. An operator who configures an explicit two-entry …

nvdaltovulnerabilidad CVSS 7.4 NVD

P Alto vulnerabilidad

25/06/2026

[CVE-2026-55700] pnpm is a package manager. From 11.3.0 until 11.5.3, `pnpm stage download` derived a local filename …

pnpm is a package manager. From 11.3.0 until 11.5.3, `pnpm stage download` derived a local filename from registry-controlled package name and version fields. A crafted manifest could escape the selected download directory and overwrite another reachable file. The merged fix validates both fields, derives one safe filename, and verifies the final destination before writing. This vulnerability is fi…

nvdaltovulnerabilidad CVSS 7.1 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-55961] wolfSSL_PKCS7_verify() returning success for a degenerate (certs-only) PKCS#7 object that contains n…

wolfSSL_PKCS7_verify() returning success for a degenerate (certs-only) PKCS#7 object that contains no signer. Such an object has empty signerInfos, so the underlying signed-data verification succeeds without authenticating any content. The compatibility-layer verify path now rejects the object when no signer signature has actually been verified, so a PKCS#7 carrying no valid signature is no longer…

nvdaltovulnerabilidad CVSS 7.5 NVD

P Alto vulnerabilidad

25/06/2026

[CVE-2026-50015] pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipeline (@pnpm/pat…

pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipeline (@pnpm/patch-package) performs no path validation on file paths extracted from .patch files. An attacker who contributes a malicious patch file via a pull request can write attacker-controlled content to or delete arbitrary files on the filesystem during pnpm install, as the user running the install. The diff…

nvdaltovulnerabilidad CVSS 7.3 NVD