Alertas de Seguridad de la Información

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15537] A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerabili…

A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-11963] The User Registration & Membership WordPress plugin before 5.2.2 does not perform an authorization …

The User Registration & Membership WordPress plugin before 5.2.2 does not perform an authorization check on a membership-upgrade action and derives the user to modify from a caller-supplied identifier instead of the current user, allowing any authenticated user such as a subscriber to change another user's WordPress role and membership tier.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

13/07/2026

[CVE-2026-11964] The User Registration & Membership WordPress plugin before 5.2.2 does not verify the authenticity o…

The User Registration & Membership WordPress plugin before 5.2.2 does not verify the authenticity of incoming payment-provider webhook notifications before acting on them, allowing unauthenticated attackers to forge a payment-approved event and activate a paid membership subscription without completing a real payment.

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-12275] The Tutor LMS WordPress plugin before 3.9.13 does not, in its Droip and Kirki page-builder integrat…

The Tutor LMS WordPress plugin before 3.9.13 does not, in its Droip and Kirki page-builder integration, perform the enrollment, purchase, and private-course capability checks it enforces in its core course handler, allowing authenticated users with subscriber-level access to enroll in paid or private courses without authorization, read private course content, and mark arbitrary courses as complet…

nvdaltovulnerabilidad CVSS 7.1 NVD

C Medio vulnerabilidad

13/07/2026

[CVE-2026-15531] A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b…

A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b2473e3706. Affected by this issue is the function torch.load of the file run_nerf.py of the component Checkpoint File Handler. The manipulation of the argument ckpt_path leads to deserialization. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Th…

check-pointcheckpointmedio CVSS 5.3 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-7162] Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve sys…

Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-9492] The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYT…

The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIO_x64.sys bundled with the module, thereby arbitrarily reading and writing physical memory and obtaining kernel-level privileges.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15515] A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects …

A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit has been disclo…

nvdaltovulnerabilidad CVSS 7.0 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15517] A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/…

A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/PlanGiveOut.aspx. This manipulation of the argument httpOID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15514] A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affec…

A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affects the function RPCService.query of the file /customizemt/xkq/rpc.jsp of the component PHPRPC Remote Call Interface. Executing a manipulation of the argument phprpc_args can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be use…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Crítico vulnerabilidad

12/07/2026

[CVE-2026-15511] A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerabilit…

A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function system_wl_upload_pic_file of the file /usr/bin/webmgnt of the component FastCGI Backend. This manipulation of the argument filename causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor w…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-15506] A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected elemen…

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 10.10.0 is sufficient to fix this issue. You shou…

nvdaltovulnerabilidad CVSS 7.8 NVD

Z Alto vulnerabilidad

12/07/2026

[CVE-2026-10665] In Zephyr's WireGuard subsystem (subsys/net/lib/wireguard), wg_process_data_message() in wg_crypto.c…

In Zephyr's WireGuard subsystem (subsys/net/lib/wireguard), wg_process_data_message() in wg_crypto.c linearizes an inbound transport-data payload into a fixed pool buffer of CONFIG_WIREGUARD_BUF_LEN bytes before decryption. The call net_buf_linearize(buf->data, data_len, pkt->buffer, ..., data_len) passed the attacker-derived data_len as both the destination capacity and the copy length, defeating…

nvdaltovulnerabilidad CVSS 7.4 NVD

Z Alto vulnerabilidad

12/07/2026

[CVE-2026-10666] parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c…

parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port") copies the port substring into a fixed 17-byte stack buffer (char ipaddr[NET_IPV4_ADDR_LEN + 1]) using a length of str_len - end - 1, where str_len is the full, unbounded input length and end is only the (

nvdaltovulnerabilidad CVSS 8.1 NVD

Z Alto vulnerabilidad

12/07/2026

[CVE-2026-10667] Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) …

Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a doubly-linked list (obj_list) of dynamically allocated kernel objects. Iteration over this list in k_object_wordlist_foreach() was performed under lists_lock using the SAFE iterator (which caches the next node), but list removal and freeing of nodes was performed under different, disjoin…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-58596] Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to …

Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-61875] luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN c…

luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests. Attackers can send malicious HTML in the NewPortMappingDescription field, which miniupnpd stores and luci-app-upnp renders without output encoding, executing the payload when administrators view the UPnP or Status pages.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-61876] LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allo…

LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup. Attackers can send a DHCPv6 Client FQDN containing script tags that execute in the administrator's browser when viewing DHCP lease pages.

nvdaltovulnerabilidad CVSS 8.8 NVD

K Alto vulnerabilidad

12/07/2026

[CVE-2026-56259] Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that…

Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and read arbitrary environment variables. Attackers can exploit the unauthenticated /md, /llm, and /llm/job endpoints by supplying a malicious base_url parameter and setting api_token to env:VARIABLE_NAME to exfiltrate provi…

nvdaltovulnerabilidad CVSS 8.2 NVD

K Crítico vulnerabilidad

12/07/2026

[CVE-2026-56260] Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /scr…

Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-traversal values to write to any location writable by the application's user, overwriting server files and causing denial of service.

nvdcriticovulnerabilidad CVSS 9.1 NVD