Alertas de Seguridad de la Información

M Alto vulnerabilidad

21/07/2026

[CVE-2026-1771] The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type val…

The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 This is due to an incorrect conditional check that prevents file validation from taking place. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on t…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-47255] AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to versio…

AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to validation and and binding of inactive-agent hour filtering; storage SQL identifier validation; metadata-backed ownership checks for raw storage SQL; blocking direct storage metadata access through raw SQL; fail-closed ou…

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-47198] Paymenter is a free and open-source webshop solution for management of hosting services. In versions…

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.1, the checkout component improperly filters URL-writable properties, allowing authenticated users to inject arbitrary key-value pairs into server provisioning parameters. Because bundled server extensions prioritize these user-supplied properties over administrator-defined configurati…

nvdaltovulnerabilidad CVSS 8.5 NVD

M Crítico vulnerabilidad

20/07/2026

[CVE-2026-35048] The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configurati…

The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them directly into a PHP configuration file without proper sanitization. On PHP 8+, the `addslashes()` protection is bypassed because it checks for `get_magic_quotes_gpc()`, a function removed in PHP 8.0. This allows raw user input to be interpolated directly into PHP source code. An u…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-42566] Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single nod…

Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.long_name that contains a malformed character encoding can render other radios unusable over BLE when managed through the iOS app. The malformed name does not need to be maliciously crafted — it can arise from ordinary buffer truncation and has been observed occurring naturally …

nvdaltovulnerabilidad CVSS 7.5 NVD

F Crítico vulnerabilidad

18/07/2026

[CVE-2026-16117] Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix w…

Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is URL-encoded. Fastify's router URL-decodes paths for route matching, but request.url retains the original encoded form, and the prefix-rewrite step uses a literal string replace against the decoded prefix. A request that encodes one or more characters of the configured prefi…

nvdcriticovulnerabilidad CVSS 10.0 NVD

L Alto vulnerabilidad

17/07/2026

[CVE-2026-7755] IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete v…

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-53411] A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation proces…

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Crítico vulnerabilidad

16/07/2026

[CVE-2026-53412] Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom …

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

16/07/2026

[CVE-2026-44180] Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like…

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. Versions 2.0.0rc1 and above prior to 3.3.0 have a prohibited UID and GID feature that by default prevents launching kernels with UID or GID 0 (root), and this restriction can be bypassed using a specially crafted KERNEL_UID or KERNEL_GID value. This input…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-53409] Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authentica…

Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

16/07/2026

[CVE-2026-33692] WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenti…

WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through the official Docker compose configuration. The official docker-compose.yml mounts the entire project root directory as the Apache document root, causing the .env file — which contains database credentials, admin passwords, and infrastructure configuration — to be served as a sta…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

16/07/2026

[CVE-2026-11386] An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubun…

An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client constructs APT source files (such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents) using data received directly from the contract server response via the directives.suites[] and directives.aptURL fields. Because the client utilizes Python's str.for…

nvdcriticovulnerabilidad CVSS 9.0 NVD

M Alto vulnerabilidad

15/07/2026

[CVE-2026-50144] ncnn is a high-performance neural network inference framework optimized for the mobile platform. In …

ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434e1d844ea0551b880a1cfb079ce1 and earlier, ncnn allows an out-of-bounds heap write in ncnn::ParamDict::load_param() when Net::load_param() loads a malicious .param model file because the parsed parameter id is checked only against id >= NCNN_MAX_PARAM_COUNT, allowing a negative id …

nvdaltovulnerabilidad CVSS 7.1 NVD

B Crítico vulnerabilidad

15/07/2026

[CVE-2026-53513] Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the @bet…

Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the @better-auth/sso plugin's POST /sso/register and POST /sso/update-provider endpoints accept attacker-controlled oidcConfig.userInfoEndpoint, tokenEndpoint, and jwksEndpoint URLs when skipDiscovery: true is set, store them on the ssoProvider row without origin validation, and fetch them during OIDC callb…

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Alto vulnerabilidad

15/07/2026

[CVE-2026-59955] Apollo is a reliable configuration management system suitable for microservice configuration managem…

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.2, Apollo ConfigService may allow unauthorized access to raw configuration data when AccessKey or management key authentication is enabled because requests under /configfiles/raw/{appId}/{clusterName}/{namespace} are parsed for authentication as appId raw instead of the a…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

15/07/2026

[CVE-2026-59954] Apollo is a reliable configuration management system suitable for microservice configuration managem…

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.2, Apollo ConfigService may allow unauthorized access to configuration data when AccessKey or management key authentication is enabled because ConfigService can accept a non-canonical appId variant during authentication while downstream request handling resolves it to the…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

15/07/2026

[CVE-2026-20153] As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS en…

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20153 are related to improper input validation that are grouped under …

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

15/07/2026

[CVE-2026-61427] PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the…

PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key option defaults to None, and the server only enforces Authorization/Bearer checks when an API key is configured. When an operator runs 'praisonai mcp serve --transport http-stream' without an API key, an unauthenticated client (no Authorization header, and no Origin header, which is a…

nvdaltovulnerabilidad CVSS 7.3 NVD

O Alto vulnerabilidad

15/07/2026

[CVE-2026-56398] Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentica…

Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentication flow where the picture claim URL MIME type is inferred from file extension rather than Content-Type header, allowing SVG files to bypass the profile image validator and be stored as data URIs. Authenticated users who visit the profile image endpoint receive attacker-controlled SVG content with …

nvdaltovulnerabilidad CVSS 7.3 NVD