Vulnerabilidades · "Ui" — Alertas SI

M Crítico vulnerabilidad

23/06/2026

[CVE-2026-56315] picklescan before 1.0.4 fails to block at least seven Python standard library modules (including uui…

picklescan before 1.0.4 fails to block at least seven Python standard library modules (including uuid, _osx_support, _aix_support, _pyrepl.pager, and imaplib) exposing eight functions that provide direct arbitrary command execution. Attackers can craft malicious pickle files importing these unblocked modules to achieve remote code execution while bypassing picklescan's safety validation entirely.

M Alto vulnerabilidad

23/06/2026

[CVE-2026-56322] Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /updat…

Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /updates endpoint that resolves the defaultChannel parameter before enforcing privacy restrictions, allowing attackers to enumerate private channels and leak version/config state. Unauthenticated attackers can probe private channel names and distinguish valid channels from nonexistent ones based on respon…

M Crítico vulnerabilidad

23/06/2026

[CVE-2026-9733] Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state…

Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter. When no state generator is specified in the constructor, the module defaults to using a SHA-1 hash of predictable and low-entropy sources, including the epoch time (which is leaked via the HTTP Date header) and a call to Perl's built-in rand function. A predictable state allows an atta…

U Alto vulnerabilidad

23/06/2026

[CVE-2026-34910] Vulnerabilidad explotada activamente en Ubiquiti UniFi OS

CISA confirma explotación activa de una vulnerabilidad en Ubiquiti UniFi OS. No se ha confirmado uso en campañas de ransomware conocidas. Fecha límite para aplicar parche según directiva CISA: 2026-06-26.

U Alto vulnerabilidad

23/06/2026

[CVE-2026-34909] Vulnerabilidad explotada activamente en Ubiquiti UniFi OS

CISA confirma explotación activa de una vulnerabilidad en Ubiquiti UniFi OS. No se ha confirmado uso en campañas de ransomware conocidas. Fecha límite para aplicar parche según directiva CISA: 2026-06-26.

U Alto vulnerabilidad

23/06/2026

[CVE-2026-34908] Vulnerabilidad explotada activamente en Ubiquiti UniFi OS

CISA confirma explotación activa de una vulnerabilidad en Ubiquiti UniFi OS. No se ha confirmado uso en campañas de ransomware conocidas. Fecha límite para aplicar parche según directiva CISA: 2026-06-26.

M Alto vulnerabilidad

22/06/2026

[CVE-2026-56280] Cap-go before 12.128.2 contains a privilege inversion vulnerability in GET /build/logs/:jobId that a…

Cap-go before 12.128.2 contains a privilege inversion vulnerability in GET /build/logs/:jobId that allows read-only API key holders to cancel running native builds. The endpoint registers an abort listener on the SSE stream that unconditionally invokes cancelBuildOnDisconnect() using the privileged server-side BUILDER_API_KEY when clients disconnect, bypassing the app.build_native permission check…

M Alto vulnerabilidad

22/06/2026

[CVE-2026-48511] MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, ExpandoObjectForm…

MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, ExpandoObjectFormatter.Deserialize populates System.Dynamic.ExpandoObject by calling IDictionary.Add for each map entry. ExpandoObject internally maintains member names in array-like structures, so inserting many distinct keys can require repeated linear scans and array copies. For large attacker-con…

M Alto vulnerabilidad

22/06/2026

[CVE-2025-71344] picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails to detect the ensurepip._run_p…

picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails to detect the ensurepip._run_pip built-in function when scanning pickle files, allowing attackers to execute arbitrary code. Malicious pickle files embedding ensurepip._run_pip calls in __reduce__ methods bypass picklescan detection and achieve remote code execution upon pickle.load() invocation.

C Alto vulnerabilidad

22/06/2026

[CVE-2026-55603] http-proxy-middleware is node.js http-proxy middleware. From 3.0.4 until 3.0.7 and 4.1.1, fixRequest…

http-proxy-middleware is node.js http-proxy middleware. From 3.0.4 until 3.0.7 and 4.1.1, fixRequestBody() is the library's documented helper for re-emitting a request body that was already consumed by a body parser. When the outgoing Content-Type is multipart/form-data, it rebuilds the body with handlerFormDataBodyData(), which interpolates each req.body key and value directly into the multipart …

D Alto vulnerabilidad

22/06/2026

[CVE-2026-44271] Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of …

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

D Alto vulnerabilidad

22/06/2026

[CVE-2026-44272] Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of …

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

D Alto vulnerabilidad

22/06/2026

[CVE-2026-44274] Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Be…

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

N Alto vulnerabilidad

22/06/2026

[CVE-2026-54293] NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials s…

NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Prior to 3.10.0-rc1, nltk.data.load() in NLTK is vulnerable to path traversal via URL-encoded path separators and traversal segments when using the nltk: URL scheme. The unsafe-path regex check is performed before url2pathname() deco…

A Alto vulnerabilidad

22/06/2026

[CVE-2026-54277] AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it …

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS…

A Alto vulnerabilidad

22/06/2026

[CVE-2026-50168] Angular is a development platform for building mobile and desktop web applications using TypeScript/…

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/platform-server package allows remote attackers to bypass host allowlist constraints and direct server-side outgoing requests to arbitrary external endpoints. This occurs due to a parser dif…

A Alto vulnerabilidad

22/06/2026

[CVE-2026-50170] Angular is a development platform for building mobile and desktop web applications using TypeScript/…

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a vulnerability was discovered in @angular/common when Server-Side Rendering (SSR) and hydration are enabled. The HttpTransferCache utility optimizes hydration by caching outgoing HTTP requests performed during SSR …

G Alto vulnerabilidad

22/06/2026

[CVE-2026-42127] The public dashboard query endpoint does not limit request body size before processing, allowing una…

The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability.

A Alto vulnerabilidad

22/06/2026

[CVE-2026-54268] Angular is a development platform for building mobile and desktop web applications using TypeScript/…

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, a Denial of Service (DoS) vulnerability exists in the @angular/common package of the Angular framework. The formatDate function, which is also utilized by the standard Angular DatePipe, does not properly limit or validate the len…

M Alto vulnerabilidad

22/06/2026

[CVE-2023-45795] A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a…

A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascript and gain full control over the device.

Alertas de Seguridad de la Información

📬 Alertas semanales SI directo en tu email

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?