Alertas de Seguridad de la Información

F Alto vulnerabilidad

23/06/2026

[CVE-2026-54512] jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson …

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymorphic deserialization. When polymorphic typing is enabled and a type identifier contains generic parameters (i.e. the type ID string contains …

nvdaltovulnerabilidad CVSS 8.1 NVD

F Alto vulnerabilidad

23/06/2026

[CVE-2026-54513] jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson …

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() allowlists any array type based only on clazz.isArray(), without validating the array's component (element) type against the configured allowlist. A PTV built with allowIfSubTyp…

nvdaltovulnerabilidad CVSS 8.1 NVD

F Alto vulnerabilidad

23/06/2026

[CVE-2026-50193] jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson …

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.13.0 until 2.14.0, a potential Denial-of-Service exists when attacker sends deeply nested JSON if (and only if) the service reads deeply nested (1000s of levels) JSON as JsonNode (ObjectMapper.readTree()) and writes out same (or modifided) node using JsonNode.toString(). This …

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-41862] Spring Statemachine's Kryo-based persistence backends (JPA, MongoDB, Redis and ZooKeeper) deserialis…

Spring Statemachine's Kryo-based persistence backends (JPA, MongoDB, Redis and ZooKeeper) deserialise persisted state-machine contexts without enforcing a class allowlist (CWE-502, deserialisation of untrusted data), which can lead to remote code execution inside the application JVM. Affected versions: Spring Statemachine 4.0.0 through 4.0.1 Spring Statemachine 3.2.0 through 3.2.4

nvdaltovulnerabilidad CVSS 8.8 NVD

M Crítico vulnerabilidad

23/06/2026

[CVE-2026-11807] A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API. The…

A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when processing Worker messages. Any authenticated user can send a forged message with an arbitrary activation_id to receive plaintext credentials associated with that activation, including OAuth tokens, vault passwords, and SSH…

nvdcriticovulnerabilidad CVSS 9.6 NVD

R Alto vulnerabilidad

23/06/2026

[CVE-2026-12112] A flaw was found in the foreman-mcp-server. A session management vulnerability in the MCP Server all…

A flaw was found in the foreman-mcp-server. A session management vulnerability in the MCP Server allows unauthenticated attackers to hijack active administrative sessions due to an improper cache of authenticated client connections, by trusting a non-secret session ID without re-validating authentication tokens and by logging all newly created session IDs to standard logs. This issue can result in…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-54328] Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with temporary npm or…

Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with temporary npm or git extension package installs used predictable paths under the operating system temporary directory. On Linux-based multi-user systems, a local attacker who can write to the shared temporary directory could prepare the expected package location before another user runs pi with a temporary extensio…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-54555] rtk filters and compresses command outputs before they reach your LLM context. Prior to 0.42.2, the …

rtk filters and compresses command outputs before they reach your LLM context. Prior to 0.42.2, the permission splitter did not conservatively split or reject several shell constructs that Bash treats as command execution boundaries or nested execution. As a result, a command beginning with an allowed prefix such as git could hide a second command behind one of these constructs. rtk rewrite return…

nvdaltovulnerabilidad CVSS 7.8 NVD

T Alto vulnerabilidad

23/06/2026

[CVE-2026-54761] Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.21 and 3.7.5, there is a high sever…

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.21 and 3.7.5, there is a high severity vulnerability in Traefik's Kubernetes Gateway provider affecting the crossProviderNamespaces allowlist. For HTTPRoute rules that declare multiple (WRR) backendRefs, Traefik evaluates the allowlist against the target backendRef.namespace instead of the route's own namespace. As a result, an HTTPR…

nvdaltovulnerabilidad CVSS 7.1 NVD

T Alto vulnerabilidad

23/06/2026

[CVE-2026-54762] Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium s…

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium severity vulnerability in Traefik's Kubernetes Ingress NGINX provider that causes affected routes to fail open. When an Ingress explicitly enables BasicAuth or DigestAuth through the supported nginx.ingress.kubernetes.io/auth-type and auth-secret annotations, but the referenced auth Secret cannot be …

nvdaltovulnerabilidad CVSS 8.6 NVD

T Crítico vulnerabilidad

23/06/2026

[CVE-2026-48491] Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity…

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection (SNICheck) that allows an unauthenticated client to bypass mutual TLS enforced through wildcard router TLSOptions. When a router uses a wildcard host rule such as Host(*.example.com) with stricter TLS options (for example RequireAndVerifyClientC…

nvdcriticovulnerabilidad CVSS 10.0 NVD

T Crítico vulnerabilidad

23/06/2026

[CVE-2026-53622] Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerabilit…

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration selection that allows unauthenticated clients to bypass router-specific mTLS enforcement. When HTTP/3 is enabled on an entrypoint, the TLS handshake selects the applicable TLS configuration through an exact, case-sensitive lookup on the SNI value, which…

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-39253] An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivot…

An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll and Pivotal.Engine.Client.Services.Conversion.dll components.

nvdaltovulnerabilidad CVSS 8.1 NVD

T Crítico vulnerabilidad

23/06/2026

[CVE-2026-48020] Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a …

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middleware that allows an unauthenticated attacker to bypass route-level authentication and authorization. When a public router matches on a PathPrefix rule and applies the StripPrefix middleware, a request path containing .. or its percent-encode…

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-54321] Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent wor…

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. From 0.101.0 until 0.184.0, sandbox previews that were switched from public to private could remain reachable without authentication for a short period after the change, due to a cached visibility state that was not invalidated when the sandbox's visibility changed. This vulnerability is fix…

nvdaltovulnerabilidad CVSS 7.0 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-54322] Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent wor…

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, Daytona's organization role update and delete endpoints authorized the caller as an owner of the organization named in the request path, but resolved and mutated the target role by its identifier alone, without verifying the role belonged to that organization. An authentica…

nvdaltovulnerabilidad CVSS 7.7 NVD

K Crítico vulnerabilidad

23/06/2026

[CVE-2026-53753] Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expres…

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expression() function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object attributes (gi_frame, f_back, f_builtins) do NOT start with underscore, enabling a complete sandbox escape to achieve arbitrary code execution.…

nvdcriticovulnerabilidad CVSS 9.8 NVD

K Alto vulnerabilidad

23/06/2026

[CVE-2026-53754] Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server…

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server's SSRF protection (validate_webhook_url / validate_url_destination in deploy/docker/utils.py) used an explicit IPv4/IPv6 CIDR blocklist that missed several address families. An attacker could reach internal services and cloud metadata endpoints (e.g. 169.254.169.254) despite the filter by encoding …

nvdaltovulnerabilidad CVSS 7.5 NVD

K Alto vulnerabilidad

23/06/2026

[CVE-2026-53755] Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server…

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to the proxy address. An unauthenticated request could supply a proxy pointing at an internal IP and route the browser through it, reaching internal services and cloud-metadata endpoints, while using a perfectly valid crawl URL. T…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-54320] Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent wor…

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization invitations could be accepted (and declined) by a user whose email matched the invitation but had not been verified. Daytona authenticates users via OIDC and matches an invitation's target email against the email in the caller's token, but the invitation accept…

nvdaltovulnerabilidad CVSS 8.4 NVD