Alertas de Seguridad de la Información

M Alto vulnerabilidad

30/06/2026

[CVE-2026-58377] JeecgBoot through 3.9.2 contains a broken access control vulnerability that allows authenticated low…

JeecgBoot through 3.9.2 contains a broken access control vulnerability that allows authenticated low-privilege users to perform full create, read, update, and delete operations on OpenAPI credentials by accessing the OpenApiAuthController and OpenApiPermissionController endpoints which lack Shiro authorization annotations. Attackers can exploit the unenforced access controls to list, add, edit, an…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

30/06/2026

[CVE-2026-58165] OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that …

OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-admin identities with fine-grained enrollment management permissions to create enrollments for any identity, including the default administrator, because the ApplyCreate function in controller/model/enrollment_manager.go verifies only that the target identity exists without …

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

30/06/2026

[CVE-2026-58168] DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privi…

DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allowed_mcp_tools function returning None instead of a denied result when mcp_tools is omitted from a user's grant in deeptutor/multi_user/tool_access.py. Attackers or prompt-injected content acting within a user session can enumerate and invoke…

nvdaltovulnerabilidad CVSS 8.8 NVD

A Alto vulnerabilidad

30/06/2026

[CVE-2026-54475] Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.…

Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic temporary destinations are expected to be isolated to the connection that created them. The isolation can be broken as this is only checked in the client, allowing a different connection to consume from another connection's temporary destination. This issue affects Apache A…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

29/06/2026

[CVE-2026-57498] Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. …

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Coolify's API controllers consistently validate server ownership with Server::whereTeamId($teamId) before any operation. However, multiple Livewire web UI components accept server_id and destination_uuid from URL query parameters without any team ownership validation, allowi…

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Alto vulnerabilidad

29/06/2026

[CVE-2026-57332] Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions.

Subscriber Broken Access Control in Wallet System for WooCommerce

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

29/06/2026

[CVE-2025-2902] Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. Th…

Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00; Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H: before DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90…

nvdaltovulnerabilidad CVSS 8.3 NVD

B Crítico vulnerabilidad

26/06/2026

[CVE-2026-50137] Budibase is an open-source low-code platform. Prior to 3.39.0, an anonymous attacker who knows or ca…

Budibase is an open-source low-code platform. Prior to 3.39.0, an anonymous attacker who knows or can enumerate a workspace id (app_...) and an S3-source datasource id (ds_...) can call this endpoint with no auth and obtain a 15-minute pre-signed PUT URL minted on the victim's IAM identity. The endpoint also returns the publicUrl so the attacker knows exactly where their PUT lands. Because bucket …

nvdcriticovulnerabilidad CVSS 9.4 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-55188] RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, …

RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, RustFS contains an authorization bypass in the bucket replication admin API. The ListRemoteTargetHandler handler for listing remote replication targets only checks whether request credentials exist, but does not verify that the caller has replication or administrator permissions. As a result, an aut…

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-55189] RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, …

RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, when the FTP frontend is enabled, the FTP read and probe handlers dispatch directly to the storage backend without ever calling the IAM authorization function that the FTP write/list handlers (and the entire HTTP S3 path) use. As a result, any user who can authenticate to the FTP listener — includin…

nvdaltovulnerabilidad CVSS 7.7 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-49991] RustFS is a distributed object storage system built in Rust. In 1.0.0-beta.4, authenticated users wi…

RustFS is a distributed object storage system built in Rust. In 1.0.0-beta.4, authenticated users with only PutObject permission on their own bucket can exploit a path traversal vulnerability in the Snowball auto-extract feature to write arbitrary objects into other users' buckets, completely breaking multi-tenant isolation. The vulnerability chains three flaws: No ../ sanitization in tar entry ke…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-47193] OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the j…

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the journal diff endpoint discloses hidden historical field values without enforcing object and field visibility. This vulnerability is fixed in 17.3.3 and 17.4.1.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-57518] Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users wit…

Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage users' permission to escalate privileges by assigning arbitrary custom roles to themselves due to missing authorization checks in UserApiController::saveAction(). Attackers can assign themselves a custom role with the 'system: manage packages' permission and then upload and insta…

nvdaltovulnerabilidad CVSS 8.8 NVD

C Alto vulnerabilidad

26/06/2026

[CVE-2026-12411] Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrust…

Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device PATCH request over /dev/lxd when security.devlxd.management.volumes is enabled.

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-57645] newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions.

newsletters_subscribers Broken Access Control in Newsletters

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-56773] Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenti…

Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records across bases and tables via endpoints like GET /api/v2/tables/get and POST /api/v2/tables/updateRecords.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-56061] Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions.

Unauthenticated Broken Access Control in Subscriptions for WooCommerce

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-56063] Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions.

Unauthenticated Broken Access Control in MailChimp Block

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-56038] Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions.

Contributor Privilege Escalation in Frisbii Pay

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-56025] Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions.

Unauthenticated Broken Access Control in Paymob for WooCommerce

nvdaltovulnerabilidad CVSS 7.5 NVD