Alertas de Seguridad de la Información

M Alto vulnerabilidad

09/10/2026

[CVE-2026-75349] EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability…

EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing. This allows a remote attacker to cause a denial of service.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-75346] An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76…

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-107813] Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster r…

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and namespace mutation operations and cluster-wide Nginx reload or restart operations with AuthRequired but without RequireSecureSession. An authenticated OTP-enabled user possessing a stolen or persisted JWT can therefore perform node CRUD, read or replace node credentials, chang…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-107814] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1…

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege could write startup dot-files such as .bash_profile into $HOME, and those files could execute when an a…

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-108113] ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI questio…

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htaccess and PHP file to the web-served image directory, achieving remote code execution as the web server u…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-107807] Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx UI accepts …

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx UI accepts the Node.Secret master credential through the node_secret query parameter in HTTP and WebSocket authentication paths instead of requiring the X-Node-Secret header. The credential can consequently appear in access logs, proxy logs, browser history, Referer headers, configuration URLs, and deployment …

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-107808] Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, POST /api/login c…

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, POST /api/login checks EnabledOTP but does not require a WebAuthn assertion when EnabledPasskey is true and no TOTP secret is configured. A passkey-only account is therefore issued a session after password verification, despite Enabled2FA reporting that the account has a second factor. An attacker who obtains the pa…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-107809] Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired acce…

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie. Because management endpoints do not universally require a CSRF token or perform Origin or Referer validation, a remote attacker can induce a logged-in administrator's browser to submit authenti…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-107810] Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/r…

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/restore.go extracts inner archives before applying the restore_nginx and restore_nginx_ui flags and permits symlinks targeting the live Nginx configuration path. An authenticated user who can create and restore backups can craft a valid backup that places a symlink in the staging tree and then writes…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-107811] Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenti…

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenticated users can access /api/nodes and /api/nodes/:id, whose responses serialize the node token field. The same token is accepted as X-Node-Secret by AuthRequired and maps the request to initUser, allowing the user to impersonate a trusted node against a reachable cluster member. This cross-node auth…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-107812] Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the self-upgrade …

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the self-upgrade mechanism validates a downloaded binary only with a same-origin digest obtained from the same upgrade mirror. A compromised mirror or network attacker able to alter both responses can supply a malicious executable and matching digest. An operator-triggered upgrade is required, and the application in…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-104084] SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and ref…

SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that is not revalidated against the account's current role when redeemed through POST /api/v1/auth/refresh-token. Attackers who capture a refresh token issued before an administrator demotion, or a demoted user whose session was not actively polling at the …

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-104082] SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker…

SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount script-directory containment control by provisioning a new mail domain with an arbitrary FileStore root path inside the trusted Scripts directory via the domain-put endpoint. Attackers can disclose the Scripts path through the AddOrU…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-78795] An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540…

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-33367] SNMP can be used to perform administrative actions such as retrieving configuration files, modifying…

SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-39453] Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be auto…

Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots.

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-39460] Usernames and passwords, including the default factory credentials, are stored in plaintext within t…

Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights, the configuration file can be viewed through the CLI or they can be exported from the device through a TFTP transfer from the web interface. A TFTP transfer can be initiated through SNMP which does not require authentication.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-28745] Usernames and passwords, including the default credentials, are stored in the configuration file usi…

Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-29797] No authentication is required when updating firmware or bootloader, making it easy for malicious fil…

No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

09/10/2026

[CVE-2026-108106] Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows…

Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or SnappyFramedInputStream to force allocations up to 2 GB, causing OutOfMemoryError and denial of service…

nvdaltovulnerabilidad CVSS 7.5 NVD