Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,434
Total alertas
3054
Críticas
10108
Altas
8
Ransomware
1741
Esta semana
RSS
Alta × cwe-427 × Limpiar todo ×
M Alto vulnerabilidad
30/06/2026
[CVE-2026-54672] electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets …
electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder-lib could use an empty path component when setting the LD_LIBRARY_PATH environment variable at runtime. This causes the current working directory to be added to the dynamic linker search path, which may allow an attacker to execute arbitrary code by placing a malicious shared li…
nvdaltovulnerabilidad CVSS 7.8 NVD
V Alto vulnerabilidad
22/06/2026
[CVE-2026-54232] vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM …
vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache package. The package is installed from a custom index (flashinfer.ai/whl/) using --extra-index-url, but the package name was not registered on PyPI, and UV_INDEX_STRATEGY="unsafe-best-match" is set globally. A…
nvdaltovulnerabilidad CVSS 8.8 NVD
A Alto vulnerabilidad
22/06/2026
[CVE-2026-49241] The Angular Language Service VS Code Extension provides a rich editing experience for Angular templa…
The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension reads the custom TypeScript SDK paths typescript.tsdk and js/ts.tsdk.path directly from workspace configurations (.vscode/settings.json) without verifying VS Code Workspace Trust state or asking for user consent (locate…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-50100] Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a pr…
Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is exploited, an attacker who can log in to a computer running an affected printer driver could elevate privileges by using a specially crafted driver.
nvdaltovulnerabilidad CVSS 7.8 NVD
O Alto vulnerabilidad
11/06/2026
[CVE-2026-53813] OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading wh…
OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state influences local package root resolution. Attackers with access to affected workspaces can load memory-core artifacts from unintended local locations, potentially executing malicious code or accessing sensitive data.
nvdaltovulnerabilidad CVSS 7.8 NVD
I Alto vulnerabilidad
11/06/2026
[CVE-2026-7870] IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified li…
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
11/06/2026
[CVE-2026-10847] A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS.…
A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint.
nvdaltovulnerabilidad CVSS 7.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
10/06/2026
[CVE-2026-8637] A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client appl…
A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code with elevated privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47937] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Searc…
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
05/06/2026
[CVE-2026-41567] Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to…
Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via `PUT /containers/{id}/archive` or piped through `docker cp -`, the daemon resolves decompression binaries (such as `xz` or `unpigz`) from the container's filesystem rather than the host's due to incorrect ordering of operation…
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
03/06/2026
[CVE-2026-44609] Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: …
Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
03/06/2026
[CVE-2026-44682] Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: …
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
03/06/2026
[CVE-2026-50033] Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: …
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
03/06/2026
[CVE-2026-36574] A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escal…
A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges and execute arbitrary code via a crafted DLL.
nvdaltovulnerabilidad CVSS 7.8 NVD