Alertas de Seguridad de la Información

M Crítico vulnerabilidad

26/06/2026

[CVE-2026-57879] An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 …

An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing RTSP custom authentication data. A remote attacker may exploit this vulnerability by sending a crafted RTSP request, resulting in memory corruption, denial of service, or potentially arbitra…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

26/06/2026

[CVE-2026-57880] An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 …

An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when parsing RTSP Digest authentication fields. A remote attacker may exploit this vulnerability by sending a crafted RTSP request containing overly long authentication data, resulting in memory corruption,…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-10823] The YMC Filter WordPress plugin before 3.11.3 does not properly authorize access to one of its REST …

The YMC Filter WordPress plugin before 3.11.3 does not properly authorize access to one of its REST API endpoints and does not validate a user-supplied query parameter, allowing unauthenticated attackers to retrieve the titles and content of private, draft, and other non-public posts.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-10835] The SALESmanago & Leadoo WordPress plugin before 3.11.3 does not properly sanitise and escape a para…

The SALESmanago & Leadoo WordPress plugin before 3.11.3 does not properly sanitise and escape a parameter passed to one of its AJAX actions before using it in a SQL statement, and fails to enforce authorisation on that action, allowing authenticated users with minimal permissions, such as subscribers, to perform SQL injection attacks.

nvdaltovulnerabilidad CVSS 7.7 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-9220] Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests bet…

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests between the watch and its backend with static hardcoded AES keys and initialization vectors. This allows an attacker to decrypt Setracker2 watch traffic.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-9221] The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5 to g…

The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5 to generate a request signature for authenticating communications between the mobile client and the backend REST API. Attackers could potentially reverse the signature to recover the session ID. With the session ID exposed, an attacker could impersonate the legitimate user and issue authenticated API re…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-9222] Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the pass…

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from the client. This could allow an attacker, who knows the hash, to authenticate and gain full access.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-54479] The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows mu…

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers. This vulnerability may allow unauthorized users to authenticate as other users or enable a malicious actor to cause a denial-of-service condition by overwhelming the backend…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-22879] vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability

vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

25/06/2026

[CVE-2026-40702] WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate chargin…

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no authentication is required, this can lead to privilege escalation and potentially compromise the security of the entire system.

nvdcriticovulnerabilidad CVSS 9.4 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-50176] The WebSocket Application Programming Interface lacks restrictions on the number of authentication r…

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2025-71340] picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.Modifie…

picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods. Attackers can embed undetected code in pickle files that executes arbitrary commands when the file is loaded via pickle.load(), enabling supply chain attacks on PyTorch models and saved Python objects. This is fixed in version 0.0.30.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2021-47987] Parse Server before 4.10.0 was affected by a supply chain incident in which incorrect version tags w…

Parse Server before 4.10.0 was affected by a supply chain incident in which incorrect version tags were pushed to the official repository pointing to an unreviewed personal fork of a contributor with write access. No releases were published with these tags; a project was exposed only if it defined a git-based dependency referencing one of the affected tags (for example, parse-server#4.9.3). The co…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-38640] A reachable unwrap in the __assert_fail function (/assert/mod.rs) of relibc commit 61f42d allows att…

A reachable unwrap in the __assert_fail function (/assert/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted string.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

25/06/2026

[CVE-2026-56445] The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datase…

The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datasets directly in os.path.join() without sanitization, allowing file writes to arbitrary paths.

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-12473] Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default configuration fetch an arbitra…

Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default configuration fetch an arbitrary URL parameter without validation. A global authentication service in OHIF automatically injects the authenticated user's OIDC Bearer token into the resulting requests, sending it to the attacker-controlled server. DICOMweb data sources are not impacted.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-37452] Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attac…

Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSIAPService.exe component

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-38637] An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to…

An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted input.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-46601] The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas …

The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-46602] The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious o…

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption.

nvdaltovulnerabilidad CVSS 7.5 NVD