Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,696
Total alertas
3097
Críticas
10327
Altas
8
Ransomware
1841
Esta semana
RSS
Vulnerabilidades × alto × Limpiar todo ×
M Alto vulnerabilidad
16/06/2026
[CVE-2026-47684] Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and synci…
Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.3.0, the private IP blocklist regex used in the URL download feature does not match IPv4-mapped IPv6 addresses (e.g. ::ffff:127.0.0.1), allowing SSRF protection to be bypassed on dual-stack systems. Version 2.3.0 fixes the issue.
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-48780] Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously craft…
Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously crafted email address could allow an attacker to bypass domain allowlist or denylist restrictions and gain access to invite-only forem deployments. The issue is patched as of `a2ab6d4`. As a workaround, some SMTP servers and email delivery providers may drop or refuse to send maliciously crafted email ad…
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12398] A command injection vulnerability was found in galaxy_ng. The do_git_checkout() function in the lega…
A command injection vulnerability was found in galaxy_ng. The do_git_checkout() function in the legacy role import API (v1) interpolates unsanitized git ref names (branch/tag names) into shell commands executed via subprocess.run() with shell=True. An authenticated user who controls a git repository can create a branch or tag with shell metacharacters in the name to achieve remote code execution o…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12324] Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed i…
Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12326] Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of…
Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12327] Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbir…
Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12328] Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefo…
Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbi…
nvdaltovulnerabilidad CVSS 8.1 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12314] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12317] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird …
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12318] Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Fir…
Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12310] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12312] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12305] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12289] Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 1…
Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12290] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 8.1 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12291] Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firef…
Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12292] Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 15…
Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-8442] The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitrary File Deletion in versions u…
The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 12.6.8. This is due to missing authorization checks on the wpfb_hide_review and wprp_save_review_admin AJAX handlers combined with insufficient path validation in the wpfb_hidereview_ajax() function, which uses strpos() to check that a stored media URL starts with the expected pre…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-54191] Unauthenticated Cross Site Scripting (XSS) in Pods <= 3.3.8 versions.
Unauthenticated Cross Site Scripting (XSS) in Pods
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-54198] Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions.
Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant
nvdaltovulnerabilidad CVSS 7.1 NVD