Vulnerabilidades — Alertas SI

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-57517] Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthe…

Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries by submitting unsanitized input through the userRes POST parameter at the user endpoint. Attackers can exploit MySQL root privileges obtained via the injection to write arbitrary files using INTO DUMPFILE, enabling deployment of a PHP webshe…

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-58025] Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerabil…

Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-24270] NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A s…

NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24246] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper con…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24247] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserializat…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24248] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper con…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24249] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserializat…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24250] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper val…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24251] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper con…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

M Alto vulnerabilidad

01/07/2026

[CVE-2026-24260] NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-…

NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and data tampering.

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24264] NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improp…

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highly compressed data. A successful exploit of this vulnerability might lead to denial of service.

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24240] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserializat…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24242] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side …

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24243] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserializat…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24244] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserializat…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24245] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserializat…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

M Alto vulnerabilidad

01/07/2026

[CVE-2026-13706] Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability i…

Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php.

M Alto vulnerabilidad

01/07/2026

[CVE-2026-13707] Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated wit…

Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. This issue affects OAuth: from * through 1.46.0, 1.45.4, 1.44.6, 1.43.9.

M Crítico vulnerabilidad

01/07/2026

[CVE-2025-15646] HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion. Support for the …

HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion. Support for the element was added to libgumbo 0.10.0 in 2015, but the walk_tree function in lib/HTML/Gumbo.xs was not updated to support it. The element was treated as a text-node, where strlen() over-reads the heap block that the pointer addresses. Any caller that runs parse() with the default format =…

M Crítico vulnerabilidad

01/07/2026

[CVE-2025-23350] NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user wi…

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.

Alertas de Seguridad de la Información

📬 Alertas semanales SI directo en tu email

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?