Alertas de Seguridad de la Información

K Alto vulnerabilidad

30/06/2026

[CVE-2026-56264] Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API ser…

Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js endpoint, which accepts and executes arbitrary user-supplied JavaScript in the server's browser context with --disable-web-security enabled. An attacker can execute arbitrary JavaScript and, combined with the browser's relaxed security settings, perform server-side request forgery …

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

30/06/2026

[CVE-2026-58449] txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body …

txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs __import__ and getattr on the caller-supplied dotted path with no allowlist. When the API is exposed with no TOKEN configured (authentication is opt-in, so all endpoints are unauthenticated) and the index is configured writable, a rem…

nvdcriticovulnerabilidad CVSS 9.8 NVD

L Crítico vulnerabilidad

30/06/2026

[CVE-2026-7873] IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS command…

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

nvdcriticovulnerabilidad CVSS 9.9 NVD

I Crítico vulnerabilidad

30/06/2026

[CVE-2026-10109] IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due …

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling.

nvdcriticovulnerabilidad CVSS 9.8 NVD

L Crítico vulnerabilidad

30/06/2026

[CVE-2026-10134] IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langfl…

IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and modify every flow, conversation, message, file upload, and saved component in the Langflow database, can connect to internal services, abuse cloud metadata endpoints, laterally move to other tenants on the same Langflow instance, and Establish persistence by modifying the public…

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Crítico vulnerabilidad

30/06/2026

[CVE-2026-58138] Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerabilit…

Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions to the workflow API endpoint prior to authentication. Attackers can exploit unsandboxed GraalVM evaluators configured with HostAccess.ALL or…

nvdcriticovulnerabilidad CVSS 9.8 NVD

H Crítico vulnerabilidad

30/06/2026

[CVE-2026-58116] LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers wit…

LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. The application passes user-supplied model path input unvalidated into AutoTokenizer.from_pretrained() and AutoModel.from_pretrained() with a hardcoded trust_remote_code=True param…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

29/06/2026

[CVE-2026-37637] An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the fi…

An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component

nvdcriticovulnerabilidad CVSS 9.1 NVD

S Alto vulnerabilidad

29/06/2026

[CVE-2026-13749] Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI vers…

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generated Python code, causing Snowflake CLI to execute attacker-controlled code in the local context of the us…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

28/06/2026

[CVE-2026-13500] A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the …

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted …

nvdaltovulnerabilidad CVSS 7.3 NVD

K Crítico vulnerabilidad

26/06/2026

[CVE-2026-53576] Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authe…

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@Filter("/api/v1/**")) treats any request whose path ends in /configs as the public instance-config endpoint and forwards it without a credential check. kestra addresses its resources by URL path segments that the caller chooses (/api/v1/{tenant}/flows/{namespace},…

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-55441] mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feat…

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task-include files are loaded on a path that never reaches it. When a directory has a task-include dir (mise-tasks/, .mise/tasks/, …) but no config file, mise falls back to the default includes and renders each task's tera f…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Crítico vulnerabilidad

26/06/2026

[CVE-2026-33646] mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .…

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during parsing, with the exec() function registered, enabling arbitrary command execution. Unlike .mise.toml files, .tool-versions files are not subject to trust verification in non-paranoid mode. This means an attacker can place a malicious .tool…

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-57315] Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.

Contributor Remote Code Execution (RCE) in Blocksy Companion Pro

nvdaltovulnerabilidad CVSS 8.5 NVD

R Alto vulnerabilidad

26/06/2026

[CVE-2026-50741] Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio an…

Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherwise valid plugin identifier as `type`, or using the `ox.setChannelTargeting` XML-RPC API method.

nvdaltovulnerabilidad CVSS 8.8 NVD

V Alto vulnerabilidad

25/06/2026

[CVE-2026-57456] Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (ru…

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple…

nvdaltovulnerabilidad CVSS 7.8 NVD

V Alto vulnerabilidad

25/06/2026

[CVE-2026-55895] Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulne…

Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when deleting a local file from the browser. A filename derived from the buffer's directory listing is interpolated into an Ex command line passed to :execute with only the backslash characte…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-56049] Contributor Remote Code Execution (RCE) in Post Snippets <= 4.0.19 versions.

Contributor Remote Code Execution (RCE) in Post Snippets

nvdaltovulnerabilidad CVSS 8.5 NVD

M Crítico vulnerabilidad

25/06/2026

[CVE-2026-54823] Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions.

Contributor Remote Code Execution (RCE) in Widget Options

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad

24/06/2026

[CVE-2026-55570] SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, it does not escape th…

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, it does not escape the untrusted fields (name, version, author, description) when they are serialized into the data-obj HTML attribute of each marketplace card. Because the attribute is single-quoted and the value is produced with JSON.stringify() (which does not escape ', ), a package whose name contains a singl…

nvdcriticovulnerabilidad CVSS 9.0 NVD