Alertas de Seguridad de la Información

M Alto vulnerabilidad

16/07/2026

[CVE-2026-61389] An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger k…

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.

nvdaltovulnerabilidad CVSS 7.0 NVD

L Alto vulnerabilidad

16/07/2026

[CVE-2026-62290] cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and…

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace users without admission validation tying the Challenge to an Order, owner reference, or Issuer-selecte…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-44982] CrowdSec offers crowdsourced protection against malicious IPs. From 1.5.0 until 1.7.8, pkg/appsec/re…

CrowdSec offers crowdsourced protection against malicious IPs. From 1.5.0 until 1.7.8, pkg/appsec/request.go NewParsedRequestFromRequest allocated a request body buffer from max(r.ContentLength, 0), so HTTP/1.1 requests using Transfer-Encoding: chunked and HTTP/2 requests without a content-length header produced an empty body and caused WAF rules targeting REQUEST_BODY, BODY_ARGS, ARGS_POST, JSON,…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-49998] Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.1, Centrifugo dynamic…

Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.1, Centrifugo dynamic JWKS endpoint verification could reuse a key for one allowed issuer to verify a JWT for another allowed issuer because the JWKS cache and singleflight lookup were keyed only by JWT header kid, not by the resolved JWKS endpoint, issuer, audience, or trust-domain namespace, affecting client.token.jwk…

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-60063] An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger k…

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.

nvdaltovulnerabilidad CVSS 7.0 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-15352] A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). T…

A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). The flaw allows the application to crash via segmentation fault when processing a routine Housekeeping Telemetry request, leading to denial of service.

nvdaltovulnerabilidad CVSS 7.5 NVD

A Crítico vulnerabilidad

16/07/2026

[CVE-2026-54526] Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on…

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to 3.7.15 and 4.0.6, the allow-list fix for CVE-2026-31892 is incomplete because workflow/util/merge.go ValidateUserOverrides and SanitizeUserWorkflowSpec walk only the top-level fields of WorkflowSpec via reflection, and WorkflowSpec.ArtifactGC is allow-listed wholesale; the stru…

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-46353] BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web checksum validation coul…

BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web checksum validation could be bypassed when a presentationUploadExternalUrl parameter was supplied to API request handling in CreateMeeting.java and ValidationService.java, allowing a user to send valid requests to some endpoints without a checksum. This issue is fixed in version 3.0.21.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

16/07/2026

[CVE-2026-46512] Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_dialplan_apply ac…

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_dialplan_apply accepted template parameters including greeting, dest, url, extension, code, and file, and Tools/DialplanApply.php wrote Dialplan/Templates.php output to extensions_custom.conf while only Dialplan/TemplateBase.php:38-42 sanitized contextName(), allowing a PERM_WRITE caller using confirm:true to inject…

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-46513] Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API t…

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by Tools/CreateApiToken.php:33-36 as raw bin2hex(random_bytes(32)) strings in oc_api_tokens, and Frogman.class.php:78 authenticated the X-Frogman-Token header by comparing it with the stored raw value, allowing database read access to recover reusable active tokens at their assigned …

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-46351] BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web generated conference ses…

BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web generated conference sessionToken values with insufficiently secure randomness in bbb-common-web/src/main/java/org/bigbluebutton/api/Util.java and bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy, allowing a session user to predict other users' conference session tokens and im…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

16/07/2026

[CVE-2026-45336] HireFlow is a web-based interview management system for managing candidates, scheduling interviews, …

HireFlow is a web-based interview management system for managing candidates, scheduling interviews, and tracking hiring progress. In 1.2 and earlier, app.py assigns a hard-coded Flask secret_key used to sign session cookies, allowing unauthenticated attackers who know the public source value to forge cookies containing role=admin and user_id values and bypass authentication. The advisory lists ver…

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-46336] Manyfold is an open source, self-hosted web application for managing a collection of 3d models, part…

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. From 0.96.0 until 0.140.0, authenticated users can rename uploaded files with path traversal sequences because app/models/model_file.rb uses the user-controlled filename in File.join(model.path, filename) without sufficient sanitization, allowing files to be moved or…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-9046] A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store …

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code.

nvdaltovulnerabilidad CVSS 7.0 NVD

M Crítico vulnerabilidad

16/07/2026

[CVE-2026-57073] HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead. The parserc_parse …

HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead. The parserc_parse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

16/07/2026

[CVE-2026-57074] XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parserc_parse f…

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parserc_parse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-63085] Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that…

Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operations. Attackers can modify sensitive User record fields such as roles and group by submitting changes through a related entity's save path, bypassing the USER_REST…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-63086] text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability …

text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compatible multimodal chat completions endpoint that allows unauthenticated network attackers to coerce the server into issuing arbitrary HTTP GET requests by supplying a crafted image_url value in chat message content. The fetch_image function in router/src/validation.rs performs no v…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Crítico vulnerabilidad

16/07/2026

[CVE-2026-63087] Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote a…

Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stack_id and org_id values present in the public source tree. Attackers can leverage the acquired token to authenticate against all internal API endpoints, create arbi…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-63088] stoatchat before 0.14.0 contains a server-side request forgery (SSRF) vulnerability that allows unau…

stoatchat before 0.14.0 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated network-accessible attackers to bypass the DNS-based IP blocklist by exploiting incomplete address validation in the url_is_blacklisted function, which inspects only the first resolved address while the underlying HTTP client iterates all cached addresses.

nvdaltovulnerabilidad CVSS 8.6 NVD