Alertas de Seguridad de la Información

M Crítico vulnerabilidad

13/10/2026

[CVE-2026-106042] An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 all…

An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-106043] A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026…

A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-106047] A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before versi…

A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.

nvdaltovulnerabilidad CVSS 7.7 NVD

M Crítico vulnerabilidad

13/10/2026

[CVE-2026-102989] TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework f…

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 for @tanstack/vue-start, an unauthenticated attacker can place non-public fields in a server-function request payload so that attacker-contro…

nvdcriticovulnerabilidad CVSS 9.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-103030] Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follow…

Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follows redirects in Http2Adapter._fetch by copying the original RequestOptions.headers into the redirected HTTP/2 request without comparing the source and destination origins. A server contacted by an application can return a cross-origin Location redirect to a different-origin destination, which then re…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

13/10/2026

[CVE-2026-55695] FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.…

FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repository URL through admin/updater-handler.php and trigger perform_update, which passes the URL to update.sh. The updater clones the repository and replaces the live plugins/, admin/, and includes/ directories without verifyin…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-55376] Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure.…

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/python_tool_executor.py because allowed standard-library modules expose operating-system, process, and filesystem capabilities thr…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Crítico vulnerabilidad

13/10/2026

[CVE-2026-55675] The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit …

The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the pr_info artifact, and the secret-bearing workflow_run job in .github/workflows/build-pr.yml checks out that commit before running pip install -r requirements.txt. A fork pull requ…

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-110025] A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown proce…

A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POST_name causes unrestricted upload. The attack can be initiated remotely. Upgrading to version 1.9.50 and 1.12.4 is capable of addressing this issue. Patch name: 11…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-109525] A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca…

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown part of the file changebookingstatus.php of the component submit2 Handler. Such manipulation of the argument username[]/timestamp[]/status[] leads to missing authorization. The attack may be performed from remote. The exploit is publicly available …

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-109605] A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This af…

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_class.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-104935] Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated att…

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

nvdaltovulnerabilidad CVSS 8.6 NVD

M Crítico vulnerabilidad

13/10/2026

[CVE-2024-34323] ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (I…

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request.

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-95114] libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/mis…

libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-95122] mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp…

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65198] Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and pri…

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build customization `manifest/build/customization/default_password.lua` sets `AuthenticationKey == EncryptionKey …

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-53420] Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user …

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.

nvdaltovulnerabilidad CVSS 8.0 NVD

M Crítico vulnerabilidad

13/10/2026

[CVE-2026-53709] MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.p…

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() accepts HS256 tokens signed with that key and get_current_user() creates a platform administrator when the token subject matches PLATFORM_ADMIN_EMAIL and REQUIRE_USER_IN_DB is false. A remote unauthenticated attacker can theref…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-11731] An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthentic…

An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-11732] An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the …

An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites f…

nvdaltovulnerabilidad CVSS 8.8 NVD