Alertas de Seguridad de la Información

U Crítico vulnerabilidad

02/07/2026

[CVE-2026-50746] A malicious actor with access to the network could exploit an Improper Access Control vulnerability …

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.

nvdcriticovulnerabilidad CVSS 10.0 NVD

U Crítico vulnerabilidad

02/07/2026

[CVE-2026-50747] A malicious actor with access to the network and low privileges could exploit a series of authentica…

A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate privileges on the host device.

nvdcriticovulnerabilidad CVSS 9.9 NVD

U Crítico vulnerabilidad

02/07/2026

[CVE-2026-50748] A malicious actor with access to the network and low privileges could exploit an Improper Input Vali…

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Alto vulnerabilidad

02/07/2026

[CVE-2026-12167] The Minifilter communication port for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local …

The Minifilter communication port for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to access privileged driver functionality via a communication interface that lacks appropriate access restrictions.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

02/07/2026

[CVE-2026-12168] An improper validation vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a loc…

An improper validation vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to escalate privileges to SYSTEM and execute arbitrary code in kernel mode via crafted messages sent through a Minifilter communication port.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

02/07/2026

[CVE-2026-58652] luci-app-travelmate (and the travelmate package) contain a privilege-escalation flaw: a LuCI/rpcd se…

luci-app-travelmate (and the travelmate package) contain a privilege-escalation flaw: a LuCI/rpcd session holding the luci-app-travelmate write ACL is granted config-wide UCI write access to the travelmate configuration. While the LuCI UI restricts the auto-login script picker to /etc/travelmate/*.login, this is only a frontend restriction. The backend travelmate service (running as root) reads th…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

02/07/2026

[CVE-2026-57756] Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions.

Contributor SQL Injection in nicen-localize-image

nvdaltovulnerabilidad CVSS 8.5 NVD

M Crítico vulnerabilidad

02/07/2026

[CVE-2026-57624] Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions.

Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

02/07/2026

[CVE-2025-69094] Subscriber SQL Injection in Unicamp <= 2.2.2 versions.

Subscriber SQL Injection in Unicamp

nvdaltovulnerabilidad CVSS 8.5 NVD

M Alto vulnerabilidad

02/07/2026

[CVE-2026-13369] The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Arbitrary File Read via the att…

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Arbitrary File Read via the attach_files() function in versions up to, and including, 3.3.29. This is due to the get_files_for_attachment() function accepting a raw attacker-controlled 'files' array when the process() method returns early due to a client-supplied saveProgress flag, bypassing all upload validation, path normalizat…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

02/07/2026

[CVE-2026-8441] The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'notinstring' p…

The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'notinstring' parameter of the wprp_load_more_revs AJAX action in versions up to, and including, 12.7.2. The parameter is read via $_POST['notinstring'] and passed through sanitize_text_field() — which strips HTML and whitespace but does not provide SQL safety. The value is then concatenated directly into a numeri…

nvdaltovulnerabilidad CVSS 7.5 NVD

L Alto vulnerabilidad

02/07/2026

[CVE-2026-8147] In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoint…

In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying traces on experiments they do not have permission to access. The issue arises from the `_before_request` ha…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

02/07/2026

[CVE-2026-33592] An unauthenticated remote attacker can exhaust server memory via the FindServers Discovery Service i…

An unauthenticated remote attacker can exhaust server memory via the FindServers Discovery Service in open62541. The serverUris field of FindServersRequest is not validated for length or array size. An attacker can declare an arbitrarily large string (up to ~3.9 GB) delivered across intermediate chunks without ever sending the final chunk. The server buffers all chunks in RAM indefinitely until th…

nvdaltovulnerabilidad CVSS 7.5 NVD

G Alto vulnerabilidad

01/07/2026

[CVE-2026-14413] Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had…

Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Crítico vulnerabilidad

01/07/2026

[CVE-2026-14405] Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute…

Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-52190] Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to…

Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_448384 component

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-36912] A NULL pointer dereference in the AP4_AtomSampleTable::GetSample() function of Aleksoid1978 MPC-BE b…

A NULL pointer dereference in the AP4_AtomSampleTable::GetSample() function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-38891] An improper input validation in the gazebo_ros_diff_drive.cpp component of gazebo_plugins v3.9.0 all…

An improper input validation in the gazebo_ros_diff_drive.cpp component of gazebo_plugins v3.9.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted geometry_msgs::Twist message.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-58263] Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. In versions prior to 4…

Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. In versions prior to 4.12.28, the built-in clean-html sanitizer can be bypassed by a MathML/ carrier that hides a dangerous element from the sanitizer's element walk, so a no-interaction event handler survives into the editor value, potentially causing Mutation XSS. When an application supplies attacker-influenced…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-55153] mchange-commons-java is a Java library of shared utility classes used by mchange projects like the c…

mchange-commons-java is a Java library of shared utility classes used by mchange projects like the c3p0 connection pool. Prior to version 0.6.0, its JNDI ObjectFactory implementation (com.mchange.v2.naming.JavaBeanObjectFactory) will construct objects of arbitrary classes and initialize "JavaBean"-style properties, which for certain classes enables JNDI injection and "deserialization gadgets." Suc…

nvdaltovulnerabilidad CVSS 7.1 NVD