Alertas de Seguridad de la Información

J Alto vulnerabilidad

10/06/2026

[CVE-2026-53435] In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins …

In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins core or plugins from an attacker-controlled `config.xml` submission in a way that allows them to handle HTTP requests afterwards. This can be used to impersonate any user and send HTTP requests on their behalf, up to and including use of the Script Cons…

nvdaltovulnerabilidad CVSS 8.8 NVD

N Alto vulnerabilidad

10/06/2026

[CVE-2026-52751] Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RM…

Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remote code execution. Attackers can craft a malicious project file with a ghidra:// URL that, when opened via File → Open Project, deserializes untrusted objects using a Jython 2.7.4 gadget chain to execute arbitrary commands.

nvdaltovulnerabilidad CVSS 8.8 NVD

V Alto vulnerabilidad

10/06/2026

[CVE-2026-41731] JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trust…

JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Combined with Jackson's default bean deserialization, a producer could supply crafted header values that caused the consumer to deserialize arbitrary JDK types. Affected versions: Spring f…

nvdaltovulnerabilidad CVSS 8.1 NVD

V Alto vulnerabilidad

10/06/2026

[CVE-2026-41732] JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning t…

JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Additionally, an empty trusted-packages configuration fell back to trusting all packages rather than applying a safe default allow-list. Affected versions: Spring for Apache Pulsar 2.0.0 through 2.0.5; 1.2.0 through 1.2.17; 1.1.0 t…

nvdaltovulnerabilidad CVSS 8.1 NVD

V Alto vulnerabilidad

10/06/2026

[CVE-2026-40993] An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataReposi…

An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the columns containing the collection of verification or encryption credentials (verification_credentials and encryption_credentials, respectively). Affected versions: Spring Security 7.0.0 through 7.0.5.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-45484] Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to el…

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-8365] The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Executi…

The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksy_meta' REST API field and the V200 database migration in versions up to and including 2.1.35. This is due to insufficient input sanitization in the blocksy_sanitize_post_meta_options() function, which only blocks values containing '' and does not prevent serialized PHP obj…

nvdaltovulnerabilidad CVSS 8.8 NVD

V Alto vulnerabilidad

09/06/2026

[CVE-2026-41855] In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageCon…

In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter allow arbitrary class instantiation, which can lead to unauthorized actions via gadget class deserialization. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 t…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

05/06/2026

[CVE-2026-7654] The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code …

The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of `unserialize()` without an `allowed_classes` restriction in the `IdsToCollection::get_ids_from_string()` function, which processes attacker-controlled post meta values without proper validation. This makes it possible for au…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

04/06/2026

[CVE-2026-25551] Seagull Software BarTender 2021 R1 through 12.0.1 contains an insecure deserialization vulnerability…

Seagull Software BarTender 2021 R1 through 12.0.1 contains an insecure deserialization vulnerability that allows low-privileged local users to escalate privileges. The DataServiceSingleton .NET Remoting endpoint is bound to localhost on TCP port 7375 via BtSystem.Service.exe, limiting the attack surface to local access only. The endpoint is configured with BinaryServerFormatterSinkProvider and Typ…

nvdaltovulnerabilidad CVSS 7.8 NVD

S Alto vulnerabilidad

02/06/2026

[CVE-2026-42211] React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a c…

React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized remote code execution (RCE) through external requests. This attack requires the application code to have an existing prototype pollution vulnerability, which can then be leveraged in a 2-step attack where the second step triggers unauthorized …

nvdaltovulnerabilidad CVSS 8.1 NVD

N Alto vulnerabilidad

02/06/2026

[CVE-2026-24221] NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of …

NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering and information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD

N Alto vulnerabilidad

02/06/2026

[CVE-2026-24237] NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of …

NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-39555] Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. Thi…

Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-39550] Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. …

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-39551] Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. Thi…

Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1.

nvdaltovulnerabilidad CVSS 8.1 NVD