Alertas de Seguridad de la Información

M Alto vulnerabilidad

05/07/2026

[CVE-2026-14736] A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown f…

A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user_auth_commit.php. Performing a manipulation of the argument upload_image results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

04/07/2026

[CVE-2026-12740] Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter…

Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter. RequestTokenV2 builds the provider authorization redirect without issuing a state value, and AccessTokenV2 exchanges the callback code and registers the resulting token into the session (register_session) without verifying that the callback corresponds to an authorization request this session ini…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

04/07/2026

[CVE-2026-12746] Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 st…

Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The authentication_url method builds the provider authorization redirect without issuing a state value, and the callback method exchanges the callback code and registers the resulting token into the session without verifying that the callback corresponds to an authorization request t…

nvdaltovulnerabilidad CVSS 8.1 NVD

L Alto vulnerabilidad

04/07/2026

[CVE-2026-53360] In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scrat…

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use As per the GHCB spec, when using GHCB v2+ require the software scratch area to reside in the GHCB's shared buffer. Note, things like Page State Change (PSC) requests _rely_ on this behavior, as the guest can't provide a length when making the request, i.e. the size of…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

04/07/2026

[CVE-2025-71375] picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning …

picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payloads using _operator.methodcaller that evade detection and execute arbitrary code when loaded by pickle.load().

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

04/07/2026

[CVE-2025-71364] picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start fun…

picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickle reduce methods, allowing remote code execution. Attackers can craft malicious pickle files embedding this built-in function that evade detection but execute arbitrary commands when loaded.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

04/07/2026

[CVE-2025-71353] picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.Gu…

picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.GuardBuilder.get function in reduce methods. Attackers can craft pickle files with embedded code that evades picklescan detection and executes arbitrary commands when loaded.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

03/07/2026

[CVE-2026-58426] Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross…

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Alto vulnerabilidad

03/07/2026

[CVE-2026-28737] Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsReq…

Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsRequired field in glTF files rendered by the 3D file viewer.

nvdaltovulnerabilidad CVSS 8.7 NVD

M Alto vulnerabilidad

03/07/2026

[CVE-2026-27660] Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the requ…

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

03/07/2026

[CVE-2026-14605] A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the funct…

A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1c_can.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about …

nvdaltovulnerabilidad CVSS 7.8 NVD

M Crítico vulnerabilidad

03/07/2026

[CVE-2026-56015] Net::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds read via an unbounded prefix …

Net::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds read via an unbounded prefix length. add() passes the prefix string to the trie builder addPrefixToTrie() without checking it against the address width. addPrefixToTrie() then walks the prefix buffer by prefix_length bits, reading prefix[byte] for byte up to prefix_len/8, where prefix is the 4-byte (IPv4) or 16-byte (IPv6) pa…

nvdcriticovulnerabilidad CVSS 9.1 NVD

H Alto vulnerabilidad

03/07/2026

[CVE-2026-11352] An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote de…

An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurl client. Because the helper function discards zero-length UDP datagrams before counting them toward the per-call packet budget, a connected QUIC peer can continuously stream empty datagrams to indefinitely stall the client.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

03/07/2026

[CVE-2026-14327] The AR for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to…

The AR for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the 'file' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Exploitation requires an attacker to first obtain a valid nonce and secure nonce via the publ…

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

03/07/2026

[CVE-2026-13383] An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authe…

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI.This vulnerability affects Fireware OS 12.1 up to and including 12.12 and 2025.1 up to and including 2026.2.

nvdaltovulnerabilidad CVSS 7.2 NVD

W Alto vulnerabilidad

03/07/2026

[CVE-2026-13384] An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authen…

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI.This vulnerability affects Fireware OS 12.1 up to and including 12.12 and 2025.1 up to and including 2026.2.

nvdaltovulnerabilidad CVSS 7.2 NVD

W Alto vulnerabilidad

03/07/2026

[CVE-2026-13054] A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged a…

A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Firebox's filesystem. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

02/07/2026

[CVE-2026-59092] JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that…

JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access sensitive debug and metrics endpoints by exploiting improper handler registration on the shared http.DefaultServeMux. Attackers can request the /debug/pprof/cmdline endpoint to obtain the process command line containing metadata engine connection st…

nvdaltovulnerabilidad CVSS 7.7 NVD

M Crítico vulnerabilidad

02/07/2026

[CVE-2024-14037] Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attacke…

Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading malicious files through the PtFjk.mob servlet endpoint. Attackers can submit a multipart POST request with a JSP webshell disguised using a spoofed image/jpeg Content-Type to bypass the absence of extension and MIME type validation, with the uploaded …

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

02/07/2026

[CVE-2024-58352] Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attac…

Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL syntax into the uid POST parameter of the wechatLoginHelper.do endpoint. Attackers can exploit the lack of input sanitization in the string-concatenated filter expression passed to the Hibernate findList() call to extract se…

nvdaltovulnerabilidad CVSS 7.5 NVD