Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,181
Total alertas
4701
Críticas
16892
Altas
8
Ransomware
1052
Esta semana
RSS
Vulnerabilidades × Este mes × Limpiar todo ×
M Alto vulnerabilidad
01/10/2026
[CVE-2026-97277] Subscriber Broken Access Control in Social Boost <= 3.6.2 versions.
Subscriber Broken Access Control in Social Boost
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-97284] Contributor PHP Object Injection in Icegram <= 3.1.31 versions.
Contributor PHP Object Injection in Icegram
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-97297] Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions.
Subscriber Broken Access Control in Gratisfaction
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-97260] Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions.
Unauthenticated Cross Site Scripting (XSS) in MaxGalleria
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-97268] Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions.
Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-94390] Editor PHP Object Injection in Hide Shipping Method For WooCommerce <= 1.5.4 versions.
Editor PHP Object Injection in Hide Shipping Method For WooCommerce
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-95588] Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.
Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter
nvdaltovulnerabilidad CVSS 8.6 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
01/10/2026
[CVE-2026-67105] HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could al…
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle (MitM) attacks.
nvdaltovulnerabilidad CVSS 7.4 NVD
M Crítico vulnerabilidad
01/10/2026
[CVE-2026-79898] Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user a…
Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master. BCC and WSI provide network-accessible administration paths and do not require a local sudo or suexec r…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-79899] Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility…
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp may be able to obtain CA secret or host private-key material while the utility runs, or obtain CA secret material left behind after successful certificate…
nvdaltovulnerabilidad CVSS 7.9 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-56589] HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, whic…
HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.
nvdaltovulnerabilidad CVSS 7.2 NVD
M Crítico vulnerabilidad
01/10/2026
[CVE-2026-62071] Unauthenticated SQL Injection in WordPress File Upload <= 5.1.10 versions.
Unauthenticated SQL Injection in WordPress File Upload
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-62073] Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions.
Unauthenticated Broken Access Control in WP Full Stripe Free
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-103687] A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the f…
A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the component SVG Sanitization. Such manipulation leads to incomplete blacklist. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.16 is sufficient to fix this issue. Th…
nvdaltovulnerabilidad CVSS 7.3 NVD
M Crítico vulnerabilidad
01/10/2026
[CVE-2026-103752] Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions.
Unauthenticated Privilege Escalation in Authorizer
nvdcriticovulnerabilidad CVSS 9.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
01/10/2026
[CVE-2026-103068] Subscriber Privilege Escalation in ByteCoreStack &#8211; MCP Connector for AI Tools <= 1.2.2 version…
Subscriber Privilege Escalation in ByteCoreStack &#8211; MCP Connector for AI Tools
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-102378] Unauthenticated Cross Site Scripting (XSS) in Parallax Section block <= 2.0.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Parallax Section block
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2024-58388] Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclu…
Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installed_emanual_down.html endpoint. Attackers can supply directory traversal sequences such as path=/manual/../../../ to access files outside the intended manual directory, inclu…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-100514] Unauthenticated Insecure Direct Object References (IDOR) in REST API Log <= 1.7.2 versions.
Unauthenticated Insecure Direct Object References (IDOR) in REST API Log
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
01/10/2026
[CVE-2026-100517] Unauthenticated Insecure Direct Object References (IDOR) in Photo Reviews for WooCommerce <= 1.2.30 …
Unauthenticated Insecure Direct Object References (IDOR) in Photo Reviews for WooCommerce
nvdaltovulnerabilidad CVSS 7.5 NVD