Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers Password Generator VPN PSK Generator
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV Vigía LATAM
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
25,033
Total alertas
5084
Críticas
19124
Altas
8
Ransomware
2669
Esta semana
RSS
Vulnerabilidades × alto × Limpiar todo ×
M Alto vulnerabilidad
03/09/2026
[CVE-2026-33630] c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-…
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple points in the resend/finish path (timeout handling, response handling, and query dispatch). If the query, o…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-85012] Improper neutralization of special elements used in an OS command (CWE-78) in the blueprint resynthe…
Improper neutralization of special elements used in an OS command (CWE-78) in the blueprint resynthesis framework in Amazon Web Services codecatalyst-blueprints before 0.3.156 might allow a user with permission to commit to a repository in the project to execute arbitrary commands in the blueprint resynthesis environment via shell metacharacters in the owner field of a [local] merge strategy entry…
nvdaltovulnerabilidad CVSS 8.0 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-85187] A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affe…
A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publ…
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-83959] Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in…
Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-63219] GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.…
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is unprotected and allows the upload of external uncontrolled files. An unauthenticated attacker can upload arbitrary `.xsl` or `.zip` formatter files to the server. An unauthenticated attacker can write arbitrary files in…
nvdaltovulnerabilidad CVSS 8.6 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84812] Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84836] Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.
Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping
nvdaltovulnerabilidad CVSS 7.1 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84847] Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions.
Unauthenticated Broken Access Control in Quick Event Manager
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84848] Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.
Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84773] Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions.
Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84776] Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions.
Unauthenticated Denial of Service Attack in MalCare Security
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84777] Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.
Unauthenticated Broken Authentication in Really Simple SSL
nvdaltovulnerabilidad CVSS 7.4 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84778] Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration &amp; Cloning <= 6.65 vers…
Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration &amp; Cloning
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84779] Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt &amp; MCP for AI Agents <= 1.51.0 v…
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt &amp; MCP for AI Agents
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84761] Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions.
Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache
nvdaltovulnerabilidad CVSS 7.2 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84763] Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions.
Unauthenticated Cross Site Scripting (XSS) in RTMKit
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84765] Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84756] Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.
Subscriber Privilege Escalation in WCFM Membership
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84757] Unauthenticated Settings Change in WP Compress <= 7.21.28 versions.
Unauthenticated Settings Change in WP Compress
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84752] Contributor PHP Object Injection in RTMKit <= 2.1.5 versions.
Contributor PHP Object Injection in RTMKit
nvdaltovulnerabilidad CVSS 8.8 NVD