Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Linux" — 1392 resultados ✕ Limpiar búsqueda
22,298
Total alertas
4744
Críticas
16966
Altas
8
Ransomware
1168
Esta semana
RSS
Alta × Limpiar todo ×
M Alto vulnerabilidad
12/08/2026
[CVE-2025-59319] CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intende…
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching a hardcoded type value. A crafted Linux partition could be inserted ahead of this intended target, allowing for code execution in the context of high privilege.
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
07/08/2026
[CVE-2026-64636] An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authe…
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
05/08/2026
[CVE-2026-71271] Memos' webhook URL validation, isReservedIP() (internal/webhook/validate.go), checks a candidate IP …
Memos' webhook URL validation, isReservedIP() (internal/webhook/validate.go), checks a candidate IP against a reservedCIDRs list that omits 0.0.0.0/8 and never calls ip.IsUnspecified() — unlike the correctly implemented sibling function isInternalIP() in internal/httpgetter/html_meta.go, which does. Because Linux redirects connections to 0.0.0.0 to loopback (127.0.0.1), an attacker registering a w…
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
04/08/2026
[CVE-2026-47616] NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker m…
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
04/08/2026
[CVE-2026-47617] NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker m…
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of this vulnerability might lead to information disclosure.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
04/08/2026
[CVE-2026-47618] NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attac…
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
04/08/2026
[CVE-2026-47623] NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of un…
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial of service and data tampering.
nvdaltovulnerabilidad CVSS 8.2 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
04/08/2026
[CVE-2026-24255] NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacke…
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tampering.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
04/08/2026
[CVE-2026-47612] NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker ma…
NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
04/08/2026
[CVE-2026-47613] NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of …
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
04/08/2026
[CVE-2026-47614] NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request for…
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
04/08/2026
[CVE-2026-47615] NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request for…
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
04/08/2026
[CVE-2026-24253] NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds writ…
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
31/07/2026
[CVE-2026-18358] A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is …
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations …
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
30/07/2026
[CVE-2026-12562] The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug int…
The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the embedded system. This vulnerability stems from a network-accessible port running a Target Communications Framework (TCF) service that does not require any authentication, allowing an attacker to directly interact with the Linux environment that power…
nvdaltovulnerabilidad CVSS 8.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
30/07/2026
[CVE-2026-16524] A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the n…
A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
30/07/2026
[CVE-2026-16526] A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with in…
A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
30/07/2026
[CVE-2026-17894] Use after free in Views in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker t…
Use after free in Views in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
30/07/2026
[CVE-2026-17877] Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed …
Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via malicious network traffic. (Chromium security severity: Medium)
nvdaltovulnerabilidad CVSS 8.4 NVD
M Alto vulnerabilidad
30/07/2026
[CVE-2026-17744] Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed …
Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
nvdaltovulnerabilidad CVSS 7.1 NVD