Alertas de Seguridad de la Información

M Alto vulnerabilidad

12/06/2026

[CVE-2026-48165] MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27…

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This …

nvdaltovulnerabilidad CVSS 8.0 NVD

M Crítico vulnerabilidad

12/06/2026

[CVE-2026-44172] MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an appli…

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in…

nvdcriticovulnerabilidad CVSS 9.1 NVD

A Alto vulnerabilidad

12/06/2026

[CVE-2026-47965] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds writ…

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

12/06/2026

[CVE-2026-44168] MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26…

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, during the SST the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters were properly validated which could allow a malicious joiner to execute arbitrary shel…

nvdaltovulnerabilidad CVSS 8.0 NVD

M Crítico vulnerabilidad

12/06/2026

[CVE-2026-44170] MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26…

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB on WIndows with installed CONNECT engine and enabled REST support interpolated table HTTP attribute into the curl command line without proper sanitizing. This allows the user to execute shell command…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

12/06/2026

[CVE-2026-6961] Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mat…

Mattermost versions 11.6.x

nvdaltovulnerabilidad CVSS 7.6 NVD

M Alto vulnerabilidad

12/06/2026

[CVE-2026-7387] Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mat…

Mattermost versions 11.6.x

nvdaltovulnerabilidad CVSS 8.8 NVD

L Alto vulnerabilidad

12/06/2026

[CVE-2026-3840] A vulnerability in Kedro version 1.2.0 allows an attacker to exploit path traversal by providing a c…

A vulnerability in Kedro version 1.2.0 allows an attacker to exploit path traversal by providing a crafted version string. The `_get_versioned_path()` method in `kedro/io/core.py` directly interpolates user-supplied version strings into filesystem paths without sanitization. This enables an attacker to escape the intended versioned dataset directory and access files outside the expected path. The …

nvdaltovulnerabilidad CVSS 7.1 NVD

A Crítico vulnerabilidad

12/06/2026

[CVE-2026-50086] The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the p…

The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" and "CWE-327: Use of a Broken or Risky Cryptographic Algorithm," and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (7.5 High).

nvdcriticovulnerabilidad CVSS 10.0 NVD

A Alto vulnerabilidad

12/06/2026

[CVE-2026-50087] The Aqara IAM/SSO gateway (gw-builder.aqara.com) exhibits a cross-origin request sharing vulnerabili…

The Aqara IAM/SSO gateway (gw-builder.aqara.com) exhibits a cross-origin request sharing vulnerability, which is an instance of "CWE-942: Permissive Cross-domain Policy with Untrusted Domains," and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N (8.2 High).

nvdaltovulnerabilidad CVSS 8.2 NVD

A Alto vulnerabilidad

12/06/2026

[CVE-2026-50088] The Aqara Developer Portal (developer.aqara.com) and shared test environments (developer-test.aqara.…

The Aqara Developer Portal (developer.aqara.com) and shared test environments (developer-test.aqara.com, aiot-test.aqara.com) exhibit cross-origin request sharing, which is an instance of "CWE-942: Permissive Cross-domain Policy with Untrusted Domains," and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N (8.2 High).

nvdaltovulnerabilidad CVSS 8.2 NVD

A Crítico vulnerabilidad

12/06/2026

[CVE-2026-50090] The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a …

The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, which is an instance of "CWE-1289: Improper Validation of Unsafe Equivalence in Input" and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N (9.3 Critical).

nvdcriticovulnerabilidad CVSS 9.3 NVD

N Alto vulnerabilidad

12/06/2026

[CVE-2026-50010] Netty is a network application framework for development of protocol servers and clients. Prior to v…

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SimpleTrustManagerFactory.engineGetTrustManagers() and related paths wrap any user-supplied plain X509TrustManager in X509TrustManagerWrapper, which extends X509ExtendedTrustManager but implements the 3-arg checkServerTrusted(chain, authType, SSLEngine) by dis…

nvdaltovulnerabilidad CVSS 7.5 NVD

N Alto vulnerabilidad

12/06/2026

[CVE-2026-50011] Netty is a network application framework for development of protocol servers and clients. Prior to v…

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, RedisArrayAggregator pre-allocates ArrayList with initial capacity equal to the RESP array element count declared in an array header. That count is taken from the wire before the corresponding child messages exist. A small malicious header can claim a huge ini…

nvdaltovulnerabilidad CVSS 7.5 NVD

N Alto vulnerabilidad

12/06/2026

[CVE-2026-47691] Netty is a network application framework for development of protocol servers and clients. Prior to v…

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoning. An attacker controlling an authoritative name server for a subdomain can poison the cache for parent domains (like `.co.uk`). In `io.netty.resolver.…

nvdaltovulnerabilidad CVSS 8.7 NVD

N Alto vulnerabilidad

12/06/2026

[CVE-2026-48059] Netty is a network application framework for development of protocol servers and clients. Prior to v…

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec in netty leaks native or heap memory on every connection when a client sends a syntactically valid header containing nested `PP2_TYPE_SSL` TLVs (type-length-value records) at depth two or greater. The leak occurs on the succ…

nvdaltovulnerabilidad CVSS 7.5 NVD

N Alto vulnerabilidad

12/06/2026

[CVE-2026-48748] Netty is a network application framework for development of protocol servers and clients. Prior to v…

Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, a memory exhaustion vulnerability in the Netty HTTP/3 codec allows the creation of an infinite number of blocked streams, which can cause OOM error. Version 4.2.15.Final patches the issue.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

12/06/2026

[CVE-2026-6853] Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe …

Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd. Co. Pause+ Mobile App allows Authentication Bypass. This issue affects Pause+ Mobile App: from v1.0.6 before v1.5.

nvdcriticovulnerabilidad CVSS 9.8 NVD

N Alto vulnerabilidad

12/06/2026

[CVE-2026-53721] Nuxt is an open-source web development framework for Vue.js. From versions 3.11.0 to before 3.21.7 a…

Nuxt is an open-source web development framework for Vue.js. From versions 3.11.0 to before 3.21.7 and 4.0.0 to before 4.4.7, there is a route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matcher. This issue has been patched in versions 3.21.7 and 4.4.7.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Crítico vulnerabilidad

12/06/2026

[CVE-2026-53787] Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary fil…

Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows unauthenticated attackers to write arbitrary files to the store's media directory by submitting files of any type or name to the upload endpoint without authentication, session validation, or cart context. Attackers can upload PHP files to achieve remote code execu…

nvdcriticovulnerabilidad CVSS 9.8 NVD