Alertas de Seguridad de la Información

O Alto vulnerabilidad

11/06/2026

[CVE-2026-53811] OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom featu…

OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows authenticated accounts to match policy entries through mutable display name metadata. Attackers with the ability to change display names can receive agent access intended for another Matrix identity, potentially gaining unauthorized permissions depending on operator configuration.

nvdaltovulnerabilidad CVSS 8.8 NVD

O Alto vulnerabilidad

11/06/2026

[CVE-2026-53812] OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control th…

OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authenticated users to bypass private-network navigation checks through Playwright act interactions. Attackers can trigger navigation to private-network targets via action-triggered redirects and subsequently read restricted page content using browser evaluation capabilities.

nvdaltovulnerabilidad CVSS 7.7 NVD

O Alto vulnerabilidad

11/06/2026

[CVE-2026-53813] OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading wh…

OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state influences local package root resolution. Attackers with access to affected workspaces can load memory-core artifacts from unintended local locations, potentially executing malicious code or accessing sensitive data.

nvdaltovulnerabilidad CVSS 7.8 NVD

O Alto vulnerabilidad

11/06/2026

[CVE-2026-53814] OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent r…

OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly receive owner-scoped MCP loopback authority instead of hook-appropriate scope. Attackers with a valid hook token can exploit the /hooks/agent endpoint to cause spawned CLI runtimes to access or invoke owner-only MCP tools, potentially executing privileged actions like persistent cron…

nvdaltovulnerabilidad CVSS 8.3 NVD

O Alto vulnerabilidad

11/06/2026

[CVE-2026-53816] OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event…

OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allows paired nodes to forge exec lifecycle events without system.run authorization. A malicious or compromised paired node can send crafted node.event messages to the gateway, steering target sessions into exec-event paths that expose capabilities the reduced node surface should not …

nvdaltovulnerabilidad CVSS 7.2 NVD

O Alto vulnerabilidad

11/06/2026

[CVE-2026-53817] OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that al…

OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that allows attackers with network access to spoof locality information and obtain durable admin-capable device tokens. Attackers can exploit insufficient locality-derived trust validation to convert temporary shared access into persistent administrative credentials that survive token rotation.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

11/06/2026

[CVE-2026-50005] Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to si…

Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera feeds.

nvdaltovulnerabilidad CVSS 7.7 NVD

M Alto vulnerabilidad

11/06/2026

[CVE-2026-50245] Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no…

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed.

nvdaltovulnerabilidad CVSS 7.7 NVD

O Alto vulnerabilidad

11/06/2026

[CVE-2026-53806] OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX s…

OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass exec revalidation checks. Attackers can exploit this by using combined shell options to execute inline shell content without intended allowlist validation, potentially enabling unauthorized command execution when the affected feature is enabled.

nvdaltovulnerabilidad CVSS 8.8 NVD

O Alto vulnerabilidad

11/06/2026

[CVE-2026-53807] OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive call…

OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that allows authenticated users to skip commands.allowFrom validation. Attackers can invoke affected callbacks to mark themselves as authorized senders before allowlist checks are applied, triggering command behavior outside configured Telegram sender restrictions.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Crítico vulnerabilidad

11/06/2026

[CVE-2026-41005] Cloud Foundry UAA incorrectly treated XML encryption to the Service Provider (confidentiality) as a …

Cloud Foundry UAA incorrectly treated XML encryption to the Service Provider (confidentiality) as a substitute for XML signatures from the Identity Provider (authenticity) in two SAML flows: the OAuth 2.0 SAML2 bearer grant (token endpoint) and browser SSO (ACS) when wantAssertionSigned is set to false. Assertions or responses that were unsigned but contained encrypted content could still be accep…

nvdcriticovulnerabilidad CVSS 9.0 NVD

M Crítico vulnerabilidad

11/06/2026

[CVE-2026-49973] Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows u…

Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the _set_password parameter to the settings API endpoint without any network origin restriction. Attackers on any reachable network can send a POST request to the settings endpoint during the first-run setup window to persist an a…

nvdcriticovulnerabilidad CVSS 9.4 NVD

M Alto vulnerabilidad

11/06/2026

[CVE-2026-53782] Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers w…

Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresses, link-local addresses, RFC 1918 private ranges, or other reserved destinations by supplying malicious podcast:transcript URL values. Attackers can bypass protections through DNS rebinding and redirec…

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

11/06/2026

[CVE-2026-46489] SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, the company logo upload …

SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, the company logo upload feature accepts any file type without validation. An authenticated administrator can upload an SVG file containing embedded JavaScript. This script is base64-encoded and injected unescaped into every page of the application, causing stored cross-site scripting (XSS) that executes in every authentica…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

11/06/2026

[CVE-2026-46622] SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, API tokens used to authe…

SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, API tokens used to authenticate all REST API requests are stored as plaintext strings in the api_tokens database table. Any attacker who obtains read access to the database — through SQL injection, a leaked backup, a misconfigured replica, or insider access — immediately obtains all API credentials for every user with no f…

nvdaltovulnerabilidad CVSS 8.1 NVD

P Alto vulnerabilidad

11/06/2026

[CVE-2026-45175] Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within…

Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes. A local attacker could potentially bypass built-in security controls or cryptographic validations. Under specific circumstances, this could allow the attacker to circumvent agent self-defense mechanisms and execute unauthorized operations. CyberArk Security Bull…

nvdaltovulnerabilidad CVSS 7.8 NVD

V Alto vulnerabilidad

11/06/2026

[CVE-2026-52858] Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completi…

Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found in the current buffer through Python's import machinery. Because the buffer's working directory is …

nvdaltovulnerabilidad CVSS 7.8 NVD

V Alto vulnerabilidad

11/06/2026

[CVE-2026-52859] Vim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() fu…

Vim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() function in src/terminal.c copies the visible terminal screen into the scrollback buffer when a snapshot is taken. For each screen cell it walks the cell's chars[] array with no upper bound, stopping only when it encounters a NUL terminator. When a cell legitimately fills all VTERM_MAX_CHARS_PER_CELL …

nvdaltovulnerabilidad CVSS 8.2 NVD

V Alto vulnerabilidad

11/06/2026

[CVE-2026-52860] Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-comple…

Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. Python evaluates function default values, parameter annotations, and class base expressions at definition time, so a hostile buffer can execute attacker-con…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

11/06/2026

[CVE-2026-48547] KanaDojo contains a command injection vulnerability that allows an attacker with pull request access…

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesData.json, which are interpolated unsanitized into a child_process.execSync() call in the release.yml workflow. Attackers can have a malicious pull request merged to trigger the Git…

nvdaltovulnerabilidad CVSS 7.3 NVD