Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "X" — 13262 resultados ✕ Limpiar búsqueda
24,073
Total alertas
4929
Críticas
18490
Altas
8
Ransomware
2592
Esta semana
RSS
Alta × Limpiar todo ×
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76680] Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenti…
Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF) attacks. A successful exploit allows an attacker to enumerate information about the internal structure of the EdgeConnect SD-WAN Orchestrator host leading to potential disclosure of sensitive information beyond what is authorize…
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73959] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Compose…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. C…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73960] Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren …
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren Server). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73966] Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). S…
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 7.2…
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73949] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter P…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73951] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCente…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73954] Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi…
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterp…
nvdaltovulnerabilidad CVSS 8.1 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73955] Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Char…
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Charting). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful at…
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73958] Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic…
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access …
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73941] Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic…
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impa…
nvdaltovulnerabilidad CVSS 8.6 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73942] Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg…
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manag…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73943] Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg…
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Identity Manager, attacks may significantly impact…
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73926] Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic…
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impa…
nvdaltovulnerabilidad CVSS 8.7 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-70915] Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). …
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. C…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-71047] Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). …
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS …
nvdaltovulnerabilidad CVSS 8.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
15/09/2026
[CVE-2026-69218] Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, When Ember receives a…
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, When Ember receives an HTTP/2 HEADERS or PUSH_PROMISE frame without END_HEADERS, H2Connection buffers the header block and subsequent CONTINUATION fragments without a size bound. A remote peer can keep an incomplete block open and exhaust heap memory before request decoding, affecting an ember-server or ember-client con…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-69210] Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, WebSocket FrameTransc…
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, WebSocket FrameTranscoder.bodyLength rejects extended payload lengths above Integer.MAX_VALUE but permits negative 64-bit lengths. A remote client that completes a WebSocket handshake through an Ember server can send such a frame, causing the decoder to return an empty frame without advancing its input. The decode loop …
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-69203] Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with …
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled through withHttp2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMS for peer-created streams. One unauthenticated connection can open an unbounded number of streams, each retaining per-stream state until heap exhaustion. The same unchecked allocation is reachable in an ember-client thr…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-92177] pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. Thi…
pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of P…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-92178] pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This …
pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF…
nvdaltovulnerabilidad CVSS 7.8 NVD