Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,113
Total alertas
4677
Críticas
16848
Altas
8
Ransomware
1013
Esta semana
RSS
Vulnerabilidades × cwe-732 × Limpiar todo ×
M Alto vulnerabilidad
05/07/2026
[CVE-2026-9085] Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBI…
Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allows DNS Spoofing. This issue affects Pardus-Parental-Control: from
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58424] Permanent Fork PR Workflow Approval Gate Bypass
Permanent Fork PR Workflow Approval Gate Bypass
nvdaltovulnerabilidad CVSS 8.9 NVD
W Alto vulnerabilidad
03/07/2026
[CVE-2026-13079] A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows …
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-55441] mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feat…
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task-include files are loaded on a path that never reaches it. When a directory has a task-include dir (mise-tasks/, .mise/tasks/, …) but no config file, mise falls back to the default includes and renders each task's tera f…
nvdaltovulnerabilidad CVSS 8.6 NVD
M Alto vulnerabilidad
23/06/2026
[CVE-2026-12957] Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all support…
Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all supported platforms may allow a for arbitrary code execution. If a local user opens a maliciously crafted workspace, any commands within the project configuration files may be automatically executed. This issue requires the user to trust the workspace when prompted. To remediate this issue, users should…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2026-49340] gonic is a music streaming server / free-software subsonic server API implementation. Prior to versi…
gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, a logic error in `ServeCreateOrUpdatePlaylist` allows any authenticated Subsonic user (including non-admin) to write playlist M3U content to an attacker-controlled absolute filesystem path on the gonic host, and to create intermediate directories with `0o777` permissions. The bug is indep…
nvdaltovulnerabilidad CVSS 8.1 NVD
P Alto vulnerabilidad
10/06/2026
[CVE-2026-0271] A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux…
A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges. This does not impact Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.
nvdaltovulnerabilidad CVSS 7.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
10/06/2026
[CVE-2026-50570] Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of …
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, Fission added PodSpec safety validation for tenant-facing Environment and Function CRDs (ValidatePodSpecSafety / ValidateContainerSafety admission webhook + sanitizeContainerSecurityContext executor merge layer), but the capability c…
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
06/06/2026
[CVE-2026-26422] clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege …
clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.
nvdaltovulnerabilidad CVSS 8.4 NVD
M Alto vulnerabilidad
04/06/2026
[CVE-2026-10840] A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBi…
A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the cluster, any authenticated user can disrupt workload scheduling, tamper with scheduling priorities, delete…
nvdaltovulnerabilidad CVSS 7.1 NVD
A Alto vulnerabilidad
04/06/2026
[CVE-2026-50209] Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (…
Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
02/06/2026
[CVE-2021-4481] Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability…
Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
02/06/2026
[CVE-2021-4480] Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability…
Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges.
nvdaltovulnerabilidad CVSS 8.2 NVD
A Alto vulnerabilidad
02/06/2026
[CVE-2026-10591] Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.…
Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to execute arbitrary commands via crafted instructions that cause writes to execution-sensitive paths (such as .vscode/tasks.json), enabling auto-execution on folder open. To remediate this issue, users should upgrade to Kiro IDE version 0.11 or later…
nvdaltovulnerabilidad CVSS 8.8 NVD