Alertas de Seguridad de la Información

A Crítico vulnerabilidad

21/07/2026

[CVE-2026-64609] Out-of-bounds read via sun.misc.Unsafe in Apache Fory. When out-of-band zero-copy deserialization is…

Out-of-bounds read via sun.misc.Unsafe in Apache Fory. When out-of-band zero-copy deserialization is used, readAlignedVarUint() can read beyond the bounds of the underlying buffer. Out-of-band zero-copy deserialization is an opt-in feature; applications that do not use it are not affected. This issue affects Apache Fory (formerly Apache Fury): from 0.5.0 before 1.4.0. Versions before 0.11.0 were …

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

21/07/2026

[CVE-2026-64608] Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deseria…

Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validate the declared field types against the actual data, so input with an inconsistent schema can cause type confusion and out-of-bounds memory access. Only the C++ implementation is affected; other language implementations of A…

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Alto vulnerabilidad

20/07/2026

[CVE-2026-56624] Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java librar…

Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate validation during user authentication in an Apache MINA SSHD server did not check for the unsupported force-command or verify-required options that could be embedded in the certificate, nor did it validate these options.…

nvdaltovulnerabilidad CVSS 7.3 NVD

A Alto vulnerabilidad

20/07/2026

[CVE-2026-56452] Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library for…

Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. The implementation of receiving files or directories via SCP did not validate filenames in SCP "C" or "D" commands. A malicious sender could send filenames containing paths, resulting in files to be written in attacker-controlled places. The issue affects on…

nvdaltovulnerabilidad CVSS 7.5 NVD

A Alto vulnerabilidad

20/07/2026

[CVE-2026-56623] Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library…

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories outside of the configured server-side root directory. The path validation applied for CVE-2026-48827 …

nvdaltovulnerabilidad CVSS 7.1 NVD

A Crítico vulnerabilidad

20/07/2026

[CVE-2026-63071] Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with a…

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted code bypassing the Groovy security sandbox. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 through 4.0.6, from 4.1.0-M0 through 4.1.1. Users are recommended to upgrade …

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

20/07/2026

[CVE-2026-57308] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i…

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized sort parameters. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1. Users are r…

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

20/07/2026

[CVE-2026-62183] Improper Privilege Management vulnerability in Apache Syncope. When: * the all-Java user workflow …

Improper Privilege Management vulnerability in Apache Syncope. When: * the all-Java user workflow adapter is configured, or * the Flowable user workflow adapter is configured, bearing a BPMN definition not requiring admin approval for user self registration of self update requests the following scenario could happen. A REST API call can allow the user to grant themselves one or more of defined …

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Alto vulnerabilidad

20/07/2026

[CVE-2026-62418] Low-privileged authenticated Server-Side Request Forgery (SSRF) vulnerability in Apache Syncope via…

Low-privileged authenticated Server-Side Request Forgery (SSRF) vulnerability in Apache Syncope via Connectors and Resources check. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1. Users are recommended to upgrade to version 4.0.7 / 4.1.2, which fix this issue.

nvdaltovulnerabilidad CVSS 8.1 NVD

A Crítico vulnerabilidad

20/07/2026

[CVE-2026-53421] Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with…

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' (REST and SQL) capability to run Groovy scripts. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1. …

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

20/07/2026

[CVE-2026-53405] Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with a…

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can import arbitrary BPMN process definitions via the REST API and then start the process. When a BPMN process containing a Groovy scriptTask is imported and started, the Groovy script is executed directly on the server, with no sandbox. This issue affects Apache Syncope: from…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

18/07/2026

[CVE-2026-59173] Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache…

Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.1.13, from 10.0.0 through 10.1.2. Users are recommended to upgrade to version 9.1.14 or 10.1.3, which fixes the issue.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

16/07/2026

[CVE-2026-44180] Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like…

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. Versions 2.0.0rc1 and above prior to 3.3.0 have a prohibited UID and GID feature that by default prevents launching kernels with UID or GID 0 (root), and this restriction can be bypassed using a specially crafted KERNEL_UID or KERNEL_GID value. This input…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-33692] WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenti…

WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through the official Docker compose configuration. The official docker-compose.yml mounts the entire project root directory as the Apache document root, causing the .env file — which contains database credentials, admin passwords, and infrastructure configuration — to be served as a sta…

nvdaltovulnerabilidad CVSS 7.5 NVD

A Alto vulnerabilidad

15/07/2026

[CVE-2026-56287] A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API (GET /api/…

A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API (GET /api/v1/clients) in versions up to and including 1.14.0. The orderBy and sortOrder request parameters are concatenated into a SQL query without sufficient validation, allowing an authenticated user with permission to view clients to inject arbitrary SQL via a crafted orderBy value. This can be leveraged …

nvdaltovulnerabilidad CVSS 8.1 NVD

A Alto vulnerabilidad

15/07/2026

[CVE-2026-57821] A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in…

A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to and including 1.14.0. The orderBy request parameter is concatenated into a SQL query without sufficient validation, allowing an authenticated user with permission to view offices to inject arbitrary SQL via a crafted orderBy value. This is a bypass of the ColumnValidator fix introduc…

nvdaltovulnerabilidad CVSS 8.1 NVD

A Alto vulnerabilidad

15/07/2026

[CVE-2026-35152] A SQL Injection vulnerability exists in Apache Fineract's Report Execution API (runreports endpoint)…

A SQL Injection vulnerability exists in Apache Fineract's Report Execution API (runreports endpoint) in versions up to and including 1.14.0. Report parameter values are incorporated into the generated SQL query without sufficient validation, allowing an authenticated user with permission to run reports to inject arbitrary SQL via crafted parameter values. This can be leveraged to perform unauthori…

nvdaltovulnerabilidad CVSS 8.8 NVD

A Crítico vulnerabilidad

14/07/2026

[CVE-2026-62390] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i…

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. A backend API refreshing table catalog may cause the injection to the generated SQL. This issue affects Apache Kylin: from 4 through 5.0.3. Users are recommended to upgrade to version 5.0.4, which fixes the issue.

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

14/07/2026

[CVE-2026-62392] Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi…

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. A backend API may bring job config parameters to OS command line. This issue affects Apache Kylin: from 4 through 5.0.3. Users are recommended to upgrade to version 5.0.4, which fixes the issue.

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

14/07/2026

[CVE-2026-58319] Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication.…

Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication. An unauthenticated attacker with network access to the FE HTTP service could perform unauthorized administrative operations, potentially affecting cluster integrity and availability and leading to cluster instability or denial of service. This issue affects Apache Doris versions prior to 3.1.0. U…

nvdcriticovulnerabilidad CVSS 9.1 NVD