Vulnerabilidades — Alertas SI

M Alto vulnerabilidad

09/08/2026

Vulnerabilidad alta en UTT HiPER 1200GW permite desbordamiento de búfer remoto

Se ha identificado un desbordamiento de búfer basado en stack en los modelos UTT HiPER 1200GW versiones hasta 2.5.3-170306, mediante manipulación del parámetro EncryptionMode en la función strcpy del archivo /goform/pptpSrvGlobalConfig. La vulnerabilidad permite ejecución remota de código sin autenticación previa, con CVSS 8.8. El exploit ha sido divulgado públicamente, aumentando el riesgo inmediato para equipos de red altas en LATAM que utilizan este modelo de puerta de enlace.

M Alto vulnerabilidad

05/08/2026

[CVE-2026-20268] As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So…

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20268 are related to issues with improper restriction of operati…

M Alto vulnerabilidad

05/08/2026

[CVE-2026-18898] A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the functi…

A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the argument timestart results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did n…

M Alto vulnerabilidad

05/08/2026

[CVE-2026-18895] A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function st…

A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respon…

M Alto vulnerabilidad

05/08/2026

[CVE-2026-18897] A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element …

A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did no…

M Alto vulnerabilidad

03/08/2026

[CVE-2026-18607] A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN5…

A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation of the argument HTTP_COOKIE leads to stack-based buffer overflow. It is possible to initiate the attack …

M Crítico vulnerabilidad

03/08/2026

Vulnerabilidad crítica de desbordamiento de búfer en Wavlink WL-NU516U1 (CVE-2026-18588)

Se ha identificado una vulnerabilidad de desbordamiento de búfer en la pila (stack-based buffer overflow) en el enrutador Wavlink WL-NU516U1 versión 708c073-mt7628, específicamente en la función fgets del archivo nas.cgi. Un atacante remoto puede explotar la manipulación del parámetro CONTENT_LENGTH para ejecutar código arbitrario sin autenticación. Esta vulnerabilidad afecta principalmente a infraestructuras de PyMEs y centros de datos en LATAM que utilizan estos dispositivos como puntos de acceso o enrutadores en redes corporativas.

M Crítico vulnerabilidad

03/08/2026

Vulnerabilidad crítica de desbordamiento de búfer en Wavlink WL-NU516U1 (CVE-2026-18589)

Se identificó una vulnerabilidad de desbordamiento de búfer basado en pila en el router Wavlink WL-NU516U1 (versión 708c073-mt7628) que afecta la función de cambio de contraseña en nas.cgi. Un atacante remoto puede explotar esta falla manipulando el parámetro User1Passwd para ejecutar código arbitrario sin autenticación previa. El exploit es público y existe riesgo inmediato en infraestructuras de LATAM que utilizan este dispositivo.

A Crítico vulnerabilidad

27/07/2026

[CVE-2026-64771] A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and i…

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.

A Alto vulnerabilidad

27/07/2026

[CVE-2026-64757] A memory corruption issue was addressed with improved state management. This issue is fixed in Safar…

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A Alto vulnerabilidad

27/07/2026

[CVE-2026-64758] The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6…

The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination.

A Alto vulnerabilidad

27/07/2026

[CVE-2026-64749] The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26…

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, visionOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.

A Crítico vulnerabilidad

27/07/2026

[CVE-2026-64726] The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26…

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker in physical proximity may be able to corrupt process memory.

A Alto vulnerabilidad

27/07/2026

[CVE-2026-64716] The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26…

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted image may corrupt process memory.

A Crítico vulnerabilidad

27/07/2026

[CVE-2026-64695] The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, …

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

A Crítico vulnerabilidad

27/07/2026

[CVE-2026-64696] The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, …

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

A Crítico vulnerabilidad

27/07/2026

[CVE-2026-64697] The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, …

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.

A Crítico vulnerabilidad

27/07/2026

[CVE-2026-64698] The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, …

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or read kernel memory.

A Crítico vulnerabilidad

27/07/2026

[CVE-2026-43810] The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26…

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

A Alto vulnerabilidad

27/07/2026

[CVE-2026-43733] The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26…

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted image may corrupt process memory.

Alertas de Seguridad de la Información

📬 Alertas semanales SI directo en tu email

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?