Alertas de Seguridad de la Información

F Alto vulnerabilidad

08/07/2026

[CVE-2026-57256] When the application opens a PDF and executes JavaScript, it performs abnormal operations on the lis…

When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their internal dictionary pointers, resulting in accessing internal members of invalid or improperly initialized fields. This led…

nvdaltovulnerabilidad CVSS 7.8 NVD

F Alto vulnerabilidad

08/07/2026

[CVE-2026-57244] After JavaScript resetting the form, the synchronization process lacks re-entry protection and objec…

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash.

nvdaltovulnerabilidad CVSS 7.8 NVD

F Alto vulnerabilidad

08/07/2026

[CVE-2026-57239] The user-controllable executable files will be directly executed by high-privilege processes, allowi…

The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate their privileges to NT AUTHORITY\SYSTEM.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

08/07/2026

[CVE-2026-14495] The DoLogin Security plugin for WordPress is vulnerable to Authentication Bypass via Insufficient Ra…

The DoLogin Security plugin for WordPress is vulnerable to Authentication Bypass via Insufficient Randomness in all versions up to, and including, 4.3. The vulnerability exists because `dologin\s::rrand()` seeds the Mersenne Twister with `mt_srand((double) microtime() * 1000000)` — discarding the integer-seconds component of `microtime()` and constraining the seed to a range of approximately 10^6 …

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

08/07/2026

[CVE-2026-9842] The Backstage - Customizer Demo Access plugin for WordPress is vulnerable to Privilege Escalation in…

The Backstage - Customizer Demo Access plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This is due to the plugin assigning the `manage_options` capability to the `backstage_customizer_user` demo role, which is more permissive than necessary for Customizer-only demo access. This makes it possible for unauthenticated attackers to navigate beyon…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

08/07/2026

[CVE-2026-14158] The Widget Logic Visual plugin for WordPress is vulnerable to Remote Code Execution in all versions …

The Widget Logic Visual plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.52 via the widget_logic_visual_check_visibility function. This is due to missing capability check and nonce verification on the widget-logic-update-conditional-tags AJAX action combined with insufficient sanitization of the 'nwlv[cod-tag]' parameter before storage and subsequ…

nvdaltovulnerabilidad CVSS 8.8 NVD

C Alto vulnerabilidad

08/07/2026

[CVE-2026-55431] Coder allows organizations to provision remote development environments via Terraform. Prior to vers…

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `coder open app` opens external workspace-app URLs without validating the scheme or host. When an external app URL contains the `$SESSION_TOKEN` placeholder the CLI replaces it with the user's real session token before handing the URL to the OS open handler. …

nvdaltovulnerabilidad CVSS 7.7 NVD

C Alto vulnerabilidad

08/07/2026

[CVE-2026-55436] Coder allows organizations to provision remote development environments via Terraform. Starting in v…

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, the AI Bridge Proxy (`aibridgeproxyd`) created a goproxy server whose default transport set `InsecureSkipVerify: true` and only assigned a secure transport when an upstream proxy was configured. In the default configuration (no upstream…

nvdaltovulnerabilidad CVSS 7.4 NVD

C Alto vulnerabilidad

08/07/2026

[CVE-2026-55427] Coder allows organizations to provision remote development environments via Terraform. Prior to vers…

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `coder config-ssh` wrote server-supplied SSH settings (`HostnameSuffix`, `SSHConfigOptions`) into the user's `~/.ssh/config` without sanitizing embedded newlines or restricting directives so a malicious or compromised Coder server could inject arbitrary SSH c…

nvdaltovulnerabilidad CVSS 8.3 NVD

C Alto vulnerabilidad

08/07/2026

[CVE-2026-55428] Coder allows organizations to provision remote development environments via Terraform. Prior to vers…

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the tailnet coordinator validates that an agent's `Addresses` derive from its authenticated UUID but applies no equivalent check to `AllowedIPs`. The coordinator forwards agent-supplied `AllowedIPs` verbatim to tunnel peers which install them into the WireGua…

nvdaltovulnerabilidad CVSS 8.2 NVD

C Alto vulnerabilidad

08/07/2026

[CVE-2026-55429] Coder allows organizations to provision remote development environments via Terraform. Prior to vers…

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `UpsertWorkspaceApp` overwrites an existing app's `agent_id` on a primary-key conflict and `insertAgentApp` accepts the app ID from the provisioner's `CompleteJob` payload without verifying it belongs to the workspace being built. `CompleteJob` runs under `db…

nvdaltovulnerabilidad CVSS 8.7 NVD

C Alto vulnerabilidad

07/07/2026

[CVE-2026-55076] Coder allows organizations to provision remote development environments via Terraform. Prior to vers…

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, Coder's OIDC callback checked `email_verified` with a direct Go `bool` type assertion. When an IdP returned the claim as a non-boolean (for example the string `"false"`) or omitted it, the assertion failed open and the email was treated as verified. Combined …

nvdaltovulnerabilidad CVSS 7.4 NVD

C Alto vulnerabilidad

07/07/2026

[CVE-2026-55077] Coder allows organizations to provision remote development environments via Terraform. Prior to vers…

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `PUT /api/v2/users/{user}/password` endpoint authorized only `ActionUpdatePersonal` and did not prevent a `user-admin` from resetting an `owner` account's password. It also did not require the current password when an admin reset another user's password. …

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-59704] Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning pri…

Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitive AI-generated content and trigger unauthorized AI generation that consumes the video owner's credits without consent.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-14895] String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service…

String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. The trim and rtrim functions stripped trailing whitespace with s/\s*$//u. Because \s* matches greedily and the $ anchor fails whenever a non-whitespace character follows the whitespace, the regex engine retries the match at each offset of a long whitespace run, producing quadratic backtracking. T…

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

07/07/2026

[CVE-2026-55075] Coder allows organizations to provision remote development environments via Terraform. Prior to vers…

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, two flaws in Coder's OIDC login chained into account takeover. Email-based user matching fell back to linking by email without checking for an existing link to a different IdP subject and the `email_verified` claim was only enforced when present as a boolean …

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-49229] Actual is a local-first personal finance app. Prior to 26.6.0, in OpenID multi-user mode, disabling …

Actual is a local-first personal finance app. Prior to 26.6.0, in OpenID multi-user mode, disabling a user only blocks future OpenID login for that identity, while existing Actual session tokens for the disabled user remain valid. The shared session validation path accepts any existing token row that has not expired without checking whether the associated user is still enabled, allowing a disabled…

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-58583] FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows…

FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical memory mapping at \Device\PhysicalMemory. Fixed in version 1.0.7.6. The fixed driver is currently available in the Windows 11 25H2 HLK (Hardware Lab Kit). The fixed driver may be available through Windows Update or from L…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-59707] LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/ap…

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges w…

nvdaltovulnerabilidad CVSS 8.6 NVD

G Alto vulnerabilidad

07/07/2026

[CVE-2026-58469] GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in …

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespa…

nvdaltovulnerabilidad CVSS 7.5 NVD