Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
14,391
Total alertas
3276
Críticas
10807
Altas
8
Ransomware
1043
Esta semana
RSS
Vulnerabilidades × Limpiar todo ×
E Alto vulnerabilidad
14/07/2026
[CVE-2026-15075] In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRe…
In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers as-is across cross-origin HTTP 30x redirects. Only Content-Length is stripped; no origin comparison (scheme, host, port) is performed before copying headers to the redirect target. As a result, credential headers, including Authorization, Coo…
nvdaltovulnerabilidad CVSS 7.5 NVD
E Alto vulnerabilidad
14/07/2026
[CVE-2026-15076] In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession com…
In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse Vert.x Web Client does not validate that the Domain attribute of a Set-Cookie response header matches the originating server's domain, in violation of RFC 6265 section 5.3. An attacker who controls any server that the victim application contacts can inject a cookie scoped to an arb…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
14/07/2026
[CVE-2026-15416] A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could all…
A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to achieve remote code execution. Under certain conditions, the attacker may then manipulate cached data to deploy malicious Kubernetes resources to managed clusters, potentially resulting in complete cluster compromise.
nvdaltovulnerabilidad CVSS 8.9 NVD
E Alto vulnerabilidad
14/07/2026
[CVE-2024-7708] For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer…
For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Continue, but any request where the network is slow can leak.
nvdaltovulnerabilidad CVSS 7.5 NVD
E Alto vulnerabilidad
14/07/2026
[CVE-2026-10051] In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in…
In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection. Subsequent request that do not have trailers report the trailers of the first request. Subsequent request that do have trailers report the union of trailers of the first request and the current request.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Medio vulnerabilidad
14/07/2026
CVE-2026-34349 Windows Media Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-34349 Windows Media Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
14/07/2026
CVE-2026-34346 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-34346 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
14/07/2026
CVE-2026-49167 Windows Kernel Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-49167 Windows Kernel Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
14/07/2026
CVE-2026-49168 Storage Spaces Direct Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-49168 Storage Spaces Direct Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
eop Microsoft MSRC
M Medio vulnerabilidad
14/07/2026
CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
14/07/2026
CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability. Tipo: Divulgación de Información.
visual-studioinfo-disclosure Microsoft MSRC
M Alto vulnerabilidad
14/07/2026
CVE-2026-45496 Visual Studio Code Security Feature Bypass Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-45496 Visual Studio Code Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.
visual-studiosfb Microsoft MSRC
M Alto vulnerabilidad
14/07/2026
CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
14/07/2026
CVE-2026-54132 Windows Kernel Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-54132 Windows Kernel Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Medio vulnerabilidad
14/07/2026
CVE-2026-54997 Windows SMB Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-54997 Windows SMB Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Medio vulnerabilidad
14/07/2026
CVE-2026-55003 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-55003 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Alto vulnerabilidad
14/07/2026
CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability. Tipo: Suplantación (Spoofing).
sharepointspoofing Microsoft MSRC
M Medio vulnerabilidad
14/07/2026
CVE-2026-50678 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-50678 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
14/07/2026
CVE-2026-54988 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-54988 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
14/07/2026
CVE-2026-56185 Windows Admin Center Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-56185 Windows Admin Center Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC