Alertas de Seguridad de la Información

M Alto vulnerabilidad

18/06/2026

[CVE-2026-56078] PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to …

PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enabling sensitive disclosure, denial of service, or code execution.

nvdaltovulnerabilidad CVSS 8.8 NVD

O Alto vulnerabilidad

18/06/2026

[CVE-2026-54017] Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. P…

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the terminal-server reverse proxy in `backend/open_webui/routers/terminals.py` does not fully confine the user-controlled `path` segment before forwarding it to an admin-configured terminal server. An authenticated user who has been granted access to a terminal server can craft `path`…

nvdaltovulnerabilidad CVSS 7.7 NVD

M Crítico vulnerabilidad

18/06/2026

[CVE-2026-54130] Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disc…

Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-47633] Exposure of sensitive information to an unauthorized actor in Cost Management Interactive Experience…

Exposure of sensitive information to an unauthorized actor in Cost Management Interactive Experiences allows an unauthorized attacker to disclose information over a network.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

18/06/2026

[CVE-2026-47647] Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privilege…

Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-32174] Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges ove…

Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.

nvdaltovulnerabilidad CVSS 7.7 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-46699] conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted…

conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.61.0, a vulnerability in the conda-forge automated webservices allowed unintended write access to feedstock repositories through GitHub username takeover. The root cause is the use of mutable GitHub usernames as identifiers for repository inv…

nvdaltovulnerabilidad CVSS 7.6 NVD

M Crítico vulnerabilidad

18/06/2026

[CVE-2026-49252] deepstream is a server that allows clients and backend services to sync data, send messages and make…

deepstream is a server that allows clients and backend services to sync data, send messages and make rpcs at scale. Versions prior to 10.0.5 are vulnerable to Prototype Pollution. Exploitation can lead to potential privilege escalation from any authenticated user with write permission to any record. This issue has been fixed in version 10.0.5.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad

18/06/2026

[CVE-2026-49257] mcp-pinot is a Python-based Model Context Protocol (MCP) server for interacting with Apache Pinot. I…

mcp-pinot is a Python-based Model Context Protocol (MCP) server for interacting with Apache Pinot. In versions 3.0.1 and below, mcp-pinot defaults to running an HTTP MCP server bound to 0.0.0.0:8080 with no authentication enabled. All MCP tools, including SQL query execution, schema creation, and table-config mutation, are reachable by any network-adjacent caller. The server proxies these calls us…

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Crítico vulnerabilidad

18/06/2026

[CVE-2026-49454] Relyra is a strict-by-default SAML 2.0 Service Provider library for Elixir and Phoenix. Versions 1.0…

Relyra is a strict-by-default SAML 2.0 Service Provider library for Elixir and Phoenix. Versions 1.0.0 and 1.1.0 accept forged SAML signatures because SignatureValue was not cryptographically verified before the library returned a successful authentication result. The XMLDSig trust boundary was incomplete as :public_key.verify over the exclusive-C14N canonicalized SignedInfo was not performed agai…

nvdcriticovulnerabilidad CVSS 9.1 NVD

C Alto vulnerabilidad

18/06/2026

[CVE-2026-43994] Coturn is a free open source implementation of TURN and STUN Server. Versions prior to 4.10.0 contai…

Coturn is a free open source implementation of TURN and STUN Server. Versions prior to 4.10.0 contain a stack buffer overflow in decode_oauth_token_gcm(). A uint16_t nonce_len field read from an attacker-supplied OAuth access token (0-65535) is passed directly to memcpy() as the copy length into a 256-byte stack buffer (oauth_encrypted_block.nonce[256]) without bounds checking. The overflow occurs…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

18/06/2026

[CVE-2026-47846] Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When …

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRA_USER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassandra account in certain scenarios. This leaves the default cassandra:cassandra superuser active as an un…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-48716] nanobot is a personal AI assistant. In versions 0.1.5.post3 and prior, the WhatsApp bridge in bridge…

nanobot is a personal AI assistant. In versions 0.1.5.post3 and prior, the WhatsApp bridge in bridge/src/whatsapp.ts constructs a filesystem path using the fileName field from an incoming WhatsApp document message without sanitization. The WhatsApp bridge downloads media attachments and writes them to disk using a filename derived from the sender's message via documentMessage.fileName, which is co…

nvdaltovulnerabilidad CVSS 8.7 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-25865] Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows …

Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to execute arbitrary code by exploiting the application's call to WinExec without a fully qualified path for RunDll32.exe when invoking shell32.dll Control_RunDLL input.dll. Attackers can place a malicious executable earlier in the search order to achieve arbitrary code execution in …

nvdaltovulnerabilidad CVSS 7.8 NVD

A Alto vulnerabilidad

18/06/2026

[CVE-2026-12390] In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by a…

In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Crítico vulnerabilidad

18/06/2026

[CVE-2026-54390] JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that a…

JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malicious template syntax due to unsanitized user-supplied input passed to the Smarty template engine. Attackers can exploit this flaw to read sensitive server-side values such as database credentials and encryption keys, and on versions 5.4.0 through 5.7.1,…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-56020] The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a…

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

nvdaltovulnerabilidad CVSS 8.1 NVD

H Alto vulnerabilidad

18/06/2026

[CVE-2026-55203] HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fc…

HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, the drl field wraps to 0, causing incorrect record consumption and allowing malicious FastCGI backends to desynchronize the FCGI framing parser, potential…

nvdaltovulnerabilidad CVSS 7.5 NVD

H Alto vulnerabilidad

18/06/2026

[CVE-2026-55204] HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability i…

HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_defrag() when the memory pool is exhausted. An attacker can trigger HPACK dynamic table insertions under memory pressure to dereference a NULL pointer and crash HAProxy worker processes, causing denial o…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-55237] AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificia…

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions prior to 0.6.62 have a DOM-based Cross-Site Scripting (XSS) vulnerability in AutoGPT's signup page. The application improperly trusts a URL parameter (`next`), which is passed to `router.push`. An attacker can craft a malicious link that, when opened by an authenticat…

nvdaltovulnerabilidad CVSS 8.8 NVD