Alertas de Seguridad de la Información

M Alto vulnerabilidad

13/10/2026

[CVE-2026-109956] NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers …

NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the model_filename or model argument can make the weka JVM write files via -d or probe files via -l outside allowed data roots.

nvdaltovulnerabilidad CVSS 7.0 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-109676] FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling…

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-109519] A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function…

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-109520] A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the functi…

A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack needs to be launched locally. The vendor was contacted early about this disclosure but did not respond in…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-103499] IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application …

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65164] NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction com…

NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial …

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65170] NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenti…

NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65172] NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL ma…

NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy. A successful exploit may lead to information disclosure and unauthorized start or stop operations that affect the integrity and …

nvdaltovulnerabilidad CVSS 8.6 NVD

M Crítico vulnerabilidad

13/10/2026

[CVE-2026-65173] NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation end…

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65141] NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A success…

NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65147] NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds rea…

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65148] NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A …

NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65149] NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds wri…

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65150] NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds rea…

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65161] NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote…

NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source path. A successful exploit may lead to information disclosure.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

13/10/2026

[CVE-2026-65162] NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initializatio…

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65101] NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacke…

NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65103] NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename ha…

NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability …

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-65104] NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could …

NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

13/10/2026

[CVE-2026-109778] Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and…

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

nvdaltovulnerabilidad CVSS 8.8 NVD