Alertas de Seguridad de la Información

T Alto vulnerabilidad

23/06/2026

[CVE-2026-54762] Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium s…

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium severity vulnerability in Traefik's Kubernetes Ingress NGINX provider that causes affected routes to fail open. When an Ingress explicitly enables BasicAuth or DigestAuth through the supported nginx.ingress.kubernetes.io/auth-type and auth-secret annotations, but the referenced auth Secret cannot be …

nvdaltovulnerabilidad CVSS 8.6 NVD

T Crítico vulnerabilidad

23/06/2026

[CVE-2026-48491] Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity…

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection (SNICheck) that allows an unauthenticated client to bypass mutual TLS enforced through wildcard router TLSOptions. When a router uses a wildcard host rule such as Host(*.example.com) with stricter TLS options (for example RequireAndVerifyClientC…

nvdcriticovulnerabilidad CVSS 10.0 NVD

T Crítico vulnerabilidad

23/06/2026

[CVE-2026-53622] Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerabilit…

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration selection that allows unauthenticated clients to bypass router-specific mTLS enforcement. When HTTP/3 is enabled on an entrypoint, the TLS handshake selects the applicable TLS configuration through an exact, case-sensitive lookup on the SNI value, which…

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-39253] An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivot…

An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll and Pivotal.Engine.Client.Services.Conversion.dll components.

nvdaltovulnerabilidad CVSS 8.1 NVD

T Crítico vulnerabilidad

23/06/2026

[CVE-2026-48020] Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a …

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middleware that allows an unauthenticated attacker to bypass route-level authentication and authorization. When a public router matches on a PathPrefix rule and applies the StripPrefix middleware, a request path containing .. or its percent-encode…

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-54321] Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent wor…

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. From 0.101.0 until 0.184.0, sandbox previews that were switched from public to private could remain reachable without authentication for a short period after the change, due to a cached visibility state that was not invalidated when the sandbox's visibility changed. This vulnerability is fix…

nvdaltovulnerabilidad CVSS 7.0 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-54322] Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent wor…

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, Daytona's organization role update and delete endpoints authorized the caller as an owner of the organization named in the request path, but resolved and mutated the target role by its identifier alone, without verifying the role belonged to that organization. An authentica…

nvdaltovulnerabilidad CVSS 7.7 NVD

K Crítico vulnerabilidad

23/06/2026

[CVE-2026-53753] Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expres…

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expression() function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object attributes (gi_frame, f_back, f_builtins) do NOT start with underscore, enabling a complete sandbox escape to achieve arbitrary code execution.…

nvdcriticovulnerabilidad CVSS 9.8 NVD

K Alto vulnerabilidad

23/06/2026

[CVE-2026-53754] Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server…

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server's SSRF protection (validate_webhook_url / validate_url_destination in deploy/docker/utils.py) used an explicit IPv4/IPv6 CIDR blocklist that missed several address families. An attacker could reach internal services and cloud metadata endpoints (e.g. 169.254.169.254) despite the filter by encoding …

nvdaltovulnerabilidad CVSS 7.5 NVD

K Alto vulnerabilidad

23/06/2026

[CVE-2026-53755] Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server…

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to the proxy address. An unauthenticated request could supply a proxy pointing at an internal IP and route the browser through it, reaching internal services and cloud-metadata endpoints, while using a perfectly valid crawl URL. T…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-54320] Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent wor…

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization invitations could be accepted (and declined) by a user whose email matched the invitation but had not been verified. Daytona authenticates users via OIDC and matches an invitation's target email against the email in the caller's token, but the invitation accept…

nvdaltovulnerabilidad CVSS 8.4 NVD

A Crítico vulnerabilidad

23/06/2026

[CVE-2026-54316] Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.…

Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—including attacker-controlled model repositories—was auto-approved without a permission prompt or being subject to --allowedTools restrictions. An attacker able to inject untrusted content into a Claude Code contex…

nvdcriticovulnerabilidad CVSS 9.1 NVD

H Alto vulnerabilidad

23/06/2026

[CVE-2026-54317] Home Assistant is open source home automation software that puts local control and privacy first. Pr…

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.6.0, the Konnected integration registers an HTTP endpoint, KonnectedView (homeassistant/components/konnected/__init__.py), that is marked as not requiring authentication (requires_auth = False). A comment next to that line says auth is instead handled "via the access token from configura…

nvdaltovulnerabilidad CVSS 7.6 NVD

H Alto vulnerabilidad

23/06/2026

[CVE-2026-54318] Home Assistant is open source home automation software that puts local control and privacy first. Pr…

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the LocationSensorManager BroadcastReceiver is exported with no permission. Any installed app, with zero runtime permissions, can broadcast a forged Google Play Services LocationResult directly to it; the receiver trusts the extra and forwards it to the user's Home Assistant server …

nvdaltovulnerabilidad CVSS 7.1 NVD

O Alto vulnerabilidad

23/06/2026

[CVE-2026-54018] Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. P…

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the SafePlaywrightURLLoader implements a validate_url function to prevent SSRF attacks by checking the IP address of the user-provided URL. However, this validation is performed only on the initial URL. Since Playwright automatically follows HTTP redirects (301/302) by default, an att…

nvdaltovulnerabilidad CVSS 7.7 NVD

M Crítico vulnerabilidad

23/06/2026

[CVE-2026-54157] LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow…

LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you. Prior to 2.1.57, the /webapi/proxy endpoint on app.lobehub.com accepts a URL in the POST body and fetches it server-side without any authentication. An attacker can use this to make arbitrary outbound requests from LobeHub's infrastructure, leak Vercel deployment details, and inject cooki…

nvdcriticovulnerabilidad CVSS 9.0 NVD

O Alto vulnerabilidad

23/06/2026

[CVE-2026-54010] Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. P…

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets an authenticated user attach arbitrary file_id values to their own chat message without checking whether they own or can read those files. If the attacker then shares that chat and grants themselves read access, has_access_to_file() treats the victim file as accessible…

nvdaltovulnerabilidad CVSS 8.3 NVD

O Alto vulnerabilidad

23/06/2026

[CVE-2026-54011] Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. P…

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6,Open WebUI renders Mermaid blocks from Markdown files in the file preview panel and inserts the generated SVG into the DOM using innerHTML. Because Mermaid is configured with securityLevel: 'loose', attacker-controlled Mermaid content can be rendered unsafely in this flow. A working pa…

nvdaltovulnerabilidad CVSS 8.7 NVD

O Alto vulnerabilidad

23/06/2026

[CVE-2026-54012] Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. P…

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets a user who can create, update, or import workspace models store arbitrary meta.knowledge entries on their model without checking whether they own or can read the referenced files. Open WebUI then treats meta.knowledge entries of type file as an authorization source in …

nvdaltovulnerabilidad CVSS 7.1 NVD

O Alto vulnerabilidad

23/06/2026

[CVE-2026-54013] Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. P…

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI patched SVG XSS in user profile images and webhook profile images but forgot to apply the same fix to model profile images. The ModelMeta class has no validate_profile_image_url field validator, and the model image serving endpoint has no MIME allowlist or nosniff header. A…

nvdaltovulnerabilidad CVSS 7.6 NVD