Alertas de Seguridad de la Información

M Alto vulnerabilidad Nuevo

Hace 10 horas

[CVE-2026-107810] Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/r…

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/restore.go extracts inner archives before applying the restore_nginx and restore_nginx_ui flags and permits symlinks targeting the live Nginx configuration path. An authenticated user who can create and restore backups can craft a valid backup that places a symlink in the staging tree and then writes…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

29/09/2026

Vulnerabilidad de traversal de ruta en Flatpak permite acceso a archivos altas del sistema

Una vulnerabilidad de traversal de ruta en Flatpak (CVSS 7.1) permite que aplicaciones maliciosas vacíen o reemplacen con enlaces simbólicos archivos del sistema host como passwd, group, machine-id y resolv.conf durante la instalación o actualización. En instalaciones a nivel de sistema, la escritura se ejecuta como root, comprometiendo la integridad de servidores en entornos empresariales y de infraestructura alta en LATAM.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

28/09/2026

[CVE-2026-97023] A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployme…

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

23/09/2026

[CVE-2026-96808] In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive reposito…

In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session could obtain two revokefs sessions via the system helper, create a symlink in one session pointing into the other sessio…

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

12/09/2026

[CVE-2026-90616] In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to fi…

In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026-76925. Flatpak creates a few app data directories (e.g., /var/cache, /var/data, /var/config, and /var/tmp) in every sandbox on every app launch where, in some cases, components of…

nvdaltovulnerabilidad CVSS 7.4 NVD

M Crítico vulnerabilidad

21/08/2026

[CVE-2026-63125] Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, pr…

Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user (a non-admin TLS/RBAC identity with `can_create_images` and `can_create_instances`) can execute arbitrary code as root on the host. A crafted image ships `backup.yaml` as a symlink to a host file. When the root daemon writes the instance's backup file, it follows the symlin…

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-32657] Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRai…

Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager Version 4.5.4, Dell PowerFlex Intelligent Catalog Versions 46.377.00 and 46.382.00 and Dell PowerFlex Rack version 4.5.4 and prior versions, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerabil…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/08/2026

[CVE-2026-53802] rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files…

rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a symlink at a predictable --files-from or --password-file path, or supply a --files-from path that escape…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

29/07/2026

[CVE-2026-54574] proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-distro instal…

proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-distro install extracted plain tarball root filesystems through _extract_plain_tar() in proot_distro/commands/install.py and Docker layers through _apply_layer() in proot_distro/helpers/docker.py without validating archive-controlled symlink targets in member.linkname, allowing a malicious archive to plant an ab…

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

27/07/2026

[CVE-2026-56748] Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 a…

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link in the pack's functions directory.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-12080] A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerabilit…

A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use (TOCTOU) file-symlink race. Successful exploitation allows the attacker to gain ownership of arbitrary root-…

nvdaltovulnerabilidad CVSS 7.3 NVD

G Alto vulnerabilidad

08/07/2026

[CVE-2026-39822] On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of th…

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-56876] extract-zip does not validate symlink targets when extracting zip archives. When processing a malici…

extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like '../../../../etc/passwd', extract-zip will extract the symlink without validation, allowing it to point outside the extraction directory. Depending on how extract-zip is used, an attacker could read or write to arbitrary files.

nvdaltovulnerabilidad CVSS 8.1 NVD

K Alto vulnerabilidad

24/06/2026

[CVE-2026-13201] A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function us…

A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the intended no-follow protection. An attacker with access to a virt-launch…

nvdaltovulnerabilidad CVSS 7.3 NVD

L Crítico vulnerabilidad

23/06/2026

[CVE-2026-55447] Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by co…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the node to read any file on the file-system by absolute path. All components based on BaseFileComponent are vulnerable to the vulnerability. This includes Docling (DoclingInlineComponent), Docling Serve, DoclingRemoteComponent…

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-12958] Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of …

Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a local user opens a workspace with a maliciously crafted symlink that resolves to a file path outside the workspace trust boundary. To remediate this issue, users should upgrade to version 1.69.0 or higher.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-56815] pwnlift before d7a9544, in a privileged deployment, contains a symlink following vulnerability in th…

pwnlift before d7a9544, in a privileged deployment, contains a symlink following vulnerability in the upload handler in Components/Pages/Home.razor.

nvdaltovulnerabilidad CVSS 7.4 NVD

D Alto vulnerabilidad

12/06/2026

[CVE-2026-42306] Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon …

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to redirect a bind mount target to an arbitrary host path, potentially overwriting host files or causing denial of service. This issue has been patche…

nvdaltovulnerabilidad CVSS 7.2 NVD