Alertas de Seguridad de la Información

A Alto vulnerabilidad

23/06/2026

[CVE-2020-9695] Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier a…

Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvdaltovulnerabilidad CVSS 7.8 NVD

B Alto vulnerabilidad

23/06/2026

[CVE-2026-56115] Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low…

Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validates JWT tokens and account status but fails to inspect the is_admin flag. Attackers can send requests to any endpoint under the /api/users pa…

nvdaltovulnerabilidad CVSS 8.8 NVD

L Alto vulnerabilidad

23/06/2026

[CVE-2026-55446] Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.0.19, an a…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.0.19, an attacker can send a /api/v1/files/upload/ request without any authentication token/cookies and abuse a very long multipart form boundary to make the langflow app unusable for all users for an indefinite amount of time. This vulnerability is fixed in 1.0.19.

nvdaltovulnerabilidad CVSS 7.5 NVD

L Crítico vulnerabilidad

23/06/2026

[CVE-2026-55447] Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by co…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the node to read any file on the file-system by absolute path. All components based on BaseFileComponent are vulnerable to the vulnerability. This includes Docling (DoclingInlineComponent), Docling Serve, DoclingRemoteComponent…

nvdcriticovulnerabilidad CVSS 9.6 NVD

L Crítico vulnerabilidad

23/06/2026

[CVE-2026-55450] Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unaut…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for any prior knowledge, only network access to Langflow. This can lead to space exhaustion on the server. In addition, in the response, the absolute path of the uploaded file is reported to the attacker, w…

nvdcriticovulnerabilidad CVSS 9.3 NVD

N Crítico vulnerabilidad

23/06/2026

[CVE-2026-54307] n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-…

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflow could reference credentials they do not own via specific public API endpoints. Credential ownership checks were only enforced partially leading to cross-user credential access. This issue affects instances where workflow sharing is enabled and at le…

nvdcriticovulnerabilidad CVSS 9.6 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-54308] n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, the MicrosoftAgent36…

n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, the MicrosoftAgent365Trigger and StripeTrigger node did not validate that inbound requests. As a result, an unauthenticated attacker who knows the webhook URL could submit a forged payload and cause the workflow to execute with attacker-controlled data. This vulnerability is fixed in 2.25.7 and 2.26.2.

nvdaltovulnerabilidad CVSS 7.2 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-54304] n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, an authen…

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, an authenticated user with permission to create or modify workflows and access to a SecurityScorecard credential with limited allowed domains could configure the SecurityScorecard node's report download operation to target an attacker-controlled URL. The node attached the SecurityScorecard API token to the o…

nvdaltovulnerabilidad CVSS 7.7 NVD

N Crítico vulnerabilidad

23/06/2026

[CVE-2026-54305] n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE …

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n session without performing per-resource ownership or scope checks on the target workflow or credential. An authenticated user with no project membership or credential sharing relationship could enumerate credential iden…

nvdcriticovulnerabilidad CVSS 9.9 NVD

Y Alto vulnerabilidad

23/06/2026

[CVE-2026-50023] yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-d…

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files (such as .desktop, .url, .webloc) to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitly included the unsafe extensions .desktop, .url, and .webloc so that the functionality of the --write…

nvdaltovulnerabilidad CVSS 8.3 NVD

Y Alto vulnerabilidad

23/06/2026

[CVE-2026-50574] yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an extern…

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format (such as an HLS/DASH stream), yt-dlp passes insufficiently sanitized input to aria2c that allows an attacker to perform an arbitrary file write. On Windows platforms, this can lead to immediate arbitrary code execution. On non-Windows platforms, this ca…

nvdaltovulnerabilidad CVSS 8.3 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-49465] n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authen…

n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows could supply a local filesystem path as the source repository in the Git node's Clone operation, or as the target repository in the Push operation, bypassing the N8N_RESTRICT_FILE_ACCESS_TO file sandbox. This allowed the contents of any loca…

nvdaltovulnerabilidad CVSS 7.7 NVD

L Crítico vulnerabilidad

23/06/2026

[CVE-2026-48519] Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public Flows" in code) contains a critical RCE vulnerability. Shareable Playground feature works by enabling the execution of workflows by unauthenticated users, by accessing a link. Specifically, it enables the route /api/v1/build_public_tmp to execute any public flow, gi…

nvdcriticovulnerabilidad CVSS 9.6 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-49444] n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authen…

n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerability is fixed in 1.123.48, 2.21.8, and 2.22.4.

nvdaltovulnerabilidad CVSS 8.5 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-44959] A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 …

A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 and earlier. A low‑privileged user could add an unexpected component parameter and inject malicious PHP code into the compiledlimitations field, which would then be executed during banner delivery. Input sanitisation has been improved to ensure that unexpected parameters are filtered out.

nvdaltovulnerabilidad CVSS 8.8 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-45732] n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth…

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth1 and OAuth2 credential reconnect endpoints authorized access using credential:read rather than credential:update. An authenticated user with read-only access to a shared credential could initiate an OAuth reconnect flow and overwrite the stored token material for that credential with tokens bound t…

nvdaltovulnerabilidad CVSS 8.1 NVD

N Crítico vulnerabilidad

23/06/2026

[CVE-2026-44789] n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authen…

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via an unvalidated pagination parameter in the HTTP Request node. Combined with other techniques this could lead to RCE on the instance. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.

nvdcriticovulnerabilidad CVSS 9.9 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-44790] n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authen…

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could inject CLI flags on the Git node's Push operation allowing an attacker to read arbitrary files from the n8n server potentially leading to full compromise. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.

nvdaltovulnerabilidad CVSS 8.8 NVD

N Crítico vulnerabilidad

23/06/2026

[CVE-2026-44791] n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authen…

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-42232 in the XML node. When combined with other nodes, this could lead to RCE on the n8n host. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.

nvdcriticovulnerabilidad CVSS 9.9 NVD

N Crítico vulnerabilidad

23/06/2026

[CVE-2026-44792] n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attack…

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator performed a Source Control Pull, n8n imported the file and could lead to SQL injection on the internal Pos…

nvdcriticovulnerabilidad CVSS 9.0 NVD