Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Multiple Vendors" — 18833 resultados ✕ Limpiar búsqueda
24,420
Total alertas
4997
Críticas
18724
Altas
8
Ransomware
2724
Esta semana
RSS
Vulnerabilidades × Limpiar todo ×
M Alto vulnerabilidad
18/08/2026
[CVE-2026-50138] goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, when `goshs` is launched with Web…
goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, when `goshs` is launched with WebDAV enabled (`-w`), the mode-restriction flags `--read-only`, `--upload-only`, and `--no-delete` are enforced only on the primary HTTP port. The WebDAV port is wired straight to `golang.org/x/net/webdav.Handler` with no equivalent guard, so an authenticated WebDAV client can `PUT`, `DELETE`, `MKCOL`…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-50187] Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the d…
Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSH_DOTENV_FILE to source after a directory change into a folder containing a .env file, allowing syntactically valid shell commands in the file to execute with the current account's privileges, including without a prompt when ZSH_DOTENV_PROMPT…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
18/08/2026
[CVE-2026-32474] Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.
Contributor Arbitrary File Upload in Templatiq
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-32481] Unauthenticated Broken Authentication in Ezoic <= 2.22.11 versions.
Unauthenticated Broken Authentication in Ezoic
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-32547] Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-32549] Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.
Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-32553] Unauthenticated Server Side Request Forgery (SSRF) in OttoKit <= 1.1.35 versions.
Unauthenticated Server Side Request Forgery (SSRF) in OttoKit
nvdaltovulnerabilidad CVSS 7.2 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Crítico vulnerabilidad
18/08/2026
[CVE-2026-32470] Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.
Unauthenticated PHP Object Injection in FundEngine
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-32472] Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions.
Unauthenticated Broken Access Control in Online Contact Widget
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-32473] Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versio…
Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-18534] ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated …
ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elements and increasing spoofing risk.
nvdaltovulnerabilidad CVSS 7.4 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-50575] BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly inv…
BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly invalidate deleted device identities, allowing an unauthenticated client to replay or spoof a device ID and bypass registration controls. Version 3.0.0-alpha contains a patch. No known workarounds are available.
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-32468] Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.
Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-32333] Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.
Unauthenticated Cross Site Scripting (XSS) in Mayosis Core
nvdaltovulnerabilidad CVSS 7.1 NVD
M Crítico vulnerabilidad
18/08/2026
[CVE-2026-32444] Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions.
Contributor Remote Code Execution (RCE) in Cwicly
nvdcriticovulnerabilidad CVSS 9.9 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Crítico vulnerabilidad
18/08/2026
[CVE-2026-32463] Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.
Contributor Arbitrary File Upload in Sync Post With Other Site
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-32464] Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.
Unauthenticated Local File Inclusion in Theme Test Drive
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-32465] Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions.
Customer PHP Object Injection in Essential Real Estate
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-32466] Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.
Subscriber SQL Injection in Gravity Forms Bookings premium
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-28191] Subscriber Privilege Escalation in The Grid <= 2.7.9.1 versions.
Subscriber Privilege Escalation in The Grid
nvdaltovulnerabilidad CVSS 8.8 NVD