Alertas de Seguridad de la Información

M Alto vulnerabilidad

05/08/2026

[CVE-2026-7327] An improper privilege management vulnerability in the REST API document processing pipeline of Progr…

An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with an administrative REST role to escalate privileges. This can result in unauthorized disclosure of sensitive server-side data when it is accessed by a higher-privileged user.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

05/08/2026

[CVE-2026-7329] An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces o…

An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges to administrator. This enables execution of privileged operations and unauthorized data access.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad

05/08/2026

[CVE-2026-8709] An improper privilege management vulnerability in the REST API document patch operation of Progress …

An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges and execute privileged operations against the Security database.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Alto vulnerabilidad

05/08/2026

[CVE-2026-18322] The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versi…

The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12.0. This is due to a permission map collision in the `havePermissions()` function in `classes/frame.php`, where `array_merge()` overwrites the popup module's administrator-restricted method list with the base controller's value, silently removing `save` from protected a…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

03/08/2026

[CVE-2026-18606] A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is…

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files (x86)\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument lpThreadParameter can lead to improper privilege management. The attack requires local access. The exploit has be…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Crítico vulnerabilidad

03/08/2026

[CVE-2026-16534] The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress's…

The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress's role-assignment and per-user edit permissions during CSV import, allowing a user holding only the user-creation capability to create an administrator account and to overwrite an existing administrator's password or email.

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

02/08/2026

[CVE-2026-67356] ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with Hos…

ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowing schema-admins to call getSecurity().createUser() without permission checks. Attackers with UPDATE_SCHEMA permission can create triggers that execute JavaScript to create server-wide admin users, escalating privileges beyond their authorization level.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

01/08/2026

[CVE-2026-16635] The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, a…

The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0 This is due to the `maybe_update_user_role()` function passing an attacker-controlled Gravity Forms field value (`$lead[$feed->user_role_field_id]`) directly into `WP_User::set_role()` without any allowlist validation, capability comparison, or permission check to constrain whic…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

01/08/2026

[CVE-2026-15414] The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in vers…

The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0. This is due to the `save_meta_boxes()` function persisting the `_wps_plan_user_role` membership plan meta from `$_POST` without an allowlist that excludes privileged roles — the only validations applied, `sanitize_key()` and `wp_roles()->is_role()`, both accept `'ad…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

31/07/2026

[CVE-2026-14333] The Demi WordPress plugin before 0.0.7 stores its full-site backup archives in a publicly accessibl…

The Demi WordPress plugin before 0.0.7 stores its full-site backup archives in a publicly accessible location under a predictable filename and without access protection, allowing unauthenticated attackers to download complete backups including the site database and its user password hashes.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

31/07/2026

[CVE-2026-12251] The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities…

The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it makes selectable on its registration forms, and its post-registration safeguard against elevated accounts is disabled by default, allowing unauthenticated users to register with a site-defined role that carries administrator capabilities and gain administrative access, when such a…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

30/07/2026

[CVE-2026-14980] IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site req…

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled.

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

30/07/2026

[CVE-2026-12687] The ProfileGrid WordPress plugin before 5.9.9.8 does not restrict which group an anonymous visitor …

The ProfileGrid WordPress plugin before 5.9.9.8 does not restrict which group an anonymous visitor may register into through its front-end registration, allowing unauthenticated users to register directly into a privileged group and be granted that group's configured role, up to Administrator when such a group exists, leading to privilege escalation.

nvdaltovulnerabilidad CVSS 7.5 NVD

G Alto vulnerabilidad

30/07/2026

[CVE-2026-17969] Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote a…

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

30/07/2026

[CVE-2026-17956] Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote …

Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

30/07/2026

[CVE-2026-17950] Inappropriate implementation in Safebrowsing in Google Chrome on Mac prior to 151.0.7922.72 allowed …

Inappropriate implementation in Safebrowsing in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a malicious file. (Chromium security severity: Low)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

30/07/2026

[CVE-2026-17952] Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who c…

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Low)

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

30/07/2026

[CVE-2026-17877] Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed …

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via malicious network traffic. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

30/07/2026

[CVE-2026-17863] Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a…

Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

30/07/2026

[CVE-2026-17864] Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a loc…

Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 7.8 NVD