Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,434

Total alertas

3054

Críticas

10108

Altas

8

Ransomware

1778

Esta semana

RSS

Vulnerabilidades × cwe-532 × 30 días × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-14948] A low privileged remote attacker can hijack an active administrative session without needing to know…

A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for authenticated users from downloadable error log archives.

M Alto vulnerabilidad

[CVE-2020-37267] Renovate versions >=19.180.0 and <23.25.1, when used with Azure DevOps, may expose the bot's authori…

Renovate versions >=19.180.0 and

M Alto vulnerabilidad

[CVE-2019-25766] Renovate versions >= 13.87.0 and <= 19.38.6 leak temporary repository tokens into pull request comme…

Renovate versions >= 13.87.0 and

M Alto vulnerabilidad

[CVE-2026-19483] IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in l…

IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade from GUI. Secrets may be disclosed in information related to exceptions in IBM Storage Scale Management GUI.

M Alto vulnerabilidad

[CVE-2026-12947] IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potenti…

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that could be read by a local user.

M Alto vulnerabilidad

[CVE-2026-14528] IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain se…

IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information.