Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,539
Total alertas
3075
Críticas
10192
Altas
8
Ransomware
1790
Esta semana
RSS
Alta × cwe-284 × Limpiar todo ×
M Alto vulnerabilidad
14/07/2026
[CVE-2026-55014] Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate priv…
Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/07/2026
[CVE-2026-50342] Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate priv…
Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
14/07/2026
[CVE-2026-50351] Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to …
Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/07/2026
[CVE-2026-50311] Improper access control in Windows Server allows an authorized attacker to elevate privileges locall…
Improper access control in Windows Server allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/07/2026
[CVE-2026-50325] Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall…
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
14/07/2026
[CVE-2026-50297] Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall…
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
14/07/2026
[CVE-2026-49805] Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall…
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
14/07/2026
[CVE-2026-15677] A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown funct…
A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
13/07/2026
[CVE-2026-57855] Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/b…
Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php executes bucket commands (ls, upload, removefiles, rename, createfolder) without performing any ACL or role check. Any authenticated user, regardless of role, can perform all bucket operations on any named bucket, including bucke…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
12/07/2026
[CVE-2026-15488] A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileCon…
A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.4 is able to address this issu…
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
10/07/2026
[CVE-2026-40452] Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. Authorization bypass…
Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. Authorization bypass in /rest/v2/fastLastQuery exposes last-value data to unauthorized authenticated users. This issue affects Apache IoTDB: from 1.3.5 before 1.3.8, from 2.0.5 before 2.0.10. Users are recommended to upgrade to version 2.0.10, which fixes the issue.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
10/07/2026
[CVE-2026-15319] A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function…
A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file web/backend/middleware/access_control.go of the component Launcher. Such manipulation leads to improper access controls. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The name of the patch is 3126. A patch should be applied…
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
09/07/2026
[CVE-2025-45422] Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal …
Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal restrictions and make arbitrary changes to port forwarding rules.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
09/07/2026
[CVE-2025-63579] Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to b…
Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be obtained. This affects Kyocera Command Center RX TASKalfa 2552ci, TASKalfa 3252ci, TASKalfa 2553ci, TASKalfa…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
09/07/2026
[CVE-2026-59720] Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, mock server creation in m…
Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, mock server creation in mock-server.service.ts does not persist the isPublic input field while schema.prisma defaults isPublic to true, causing mock servers linked to private collections to be publicly accessible without authentication and potentially expose sensitive API data. This issue is fixed in version 2026.6.0.
nvdaltovulnerabilidad CVSS 7.5 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
08/07/2026
[CVE-2026-58525] Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass…
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
nvdaltovulnerabilidad CVSS 8.2 NVD
J Alto vulnerabilidad
07/07/2026
[CVE-2026-48957] An improper access check allows unauthorized users to access com_privacy datasets.
An improper access check allows unauthorized users to access com_privacy datasets.
nvdaltovulnerabilidad CVSS 8.8 NVD
J Alto vulnerabilidad
07/07/2026
[CVE-2026-48958] An improper access check allows unauthorized users to create custom fields via webservices endpoints…
An improper access check allows unauthorized users to create custom fields via webservices endpoints.
nvdaltovulnerabilidad CVSS 8.8 NVD
J Alto vulnerabilidad
07/07/2026
[CVE-2026-48948] An improper access check allows user to download vcard exports of com_contact contacts that are inac…
An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.
nvdaltovulnerabilidad CVSS 8.8 NVD
T Alto vulnerabilidad
06/07/2026
[CVE-2026-54765] Traefik is an open source HTTP reverse proxy and load balancer. From v3.7.0 prior to v3.7.6, Traefik…
Traefik is an open source HTTP reverse proxy and load balancer. From v3.7.0 prior to v3.7.6, Traefik's Kubernetes Gateway API provider may resolve two accepted HTTPRoutes that target the same backend Service:port but configure different backendRef filters to the same child service and apply only one route's filter set to all requests reaching that backend. In Gateway deployments where backendRef f…
nvdaltovulnerabilidad CVSS 8.5 NVD