Alertas de Seguridad de la Información

R Alto vulnerabilidad

25/06/2026

[CVE-2026-9099] A flaw was found in Keycloak. A missing authorization check in the GroupResource.addChild() endpoint…

A flaw was found in Keycloak. A missing authorization check in the GroupResource.addChild() endpoint within the Admin REST API allows an authenticated user with limited administrative privileges to reparent any existing group. When Fine-Grained Admin Permissions v2 (FGAPv2) is enabled, an attacker with management rights over a single low-privilege group can reparent a highly privileged group (such…

nvdaltovulnerabilidad CVSS 7.7 NVD

L Alto vulnerabilidad

25/06/2026

[CVE-2026-53153] In the Linux kernel, the following vulnerability has been resolved: mm/list_lru: drain before clear…

In the Linux kernel, the following vulnerability has been resolved: mm/list_lru: drain before clearing xarray entry on reparent memcg_reparent_list_lrus() clears the dying memcg's xarray entry with xas_store(&xas, NULL) before reparenting its per-node lists into the parent. This opens a window where a concurrent list_lru_del() arriving for the dying memcg sees xa_load() == NULL, walks to the pa…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

25/06/2026

[CVE-2026-53145] In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix change_hand…

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix change_handle ioctl, attempt 4 [airlied: just added some comments on how to reenable] On-list because the cat is out of the bag and we're clearly not good enough to figure this out in private. The story thus far: 5e28b7b94408 ("drm: Set old handle to NULL before prime swap in change_handle") tried to fix a r…

nvdaltovulnerabilidad CVSS 7.8 NVD

K Alto vulnerabilidad

24/06/2026

[CVE-2026-13201] A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function us…

A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the intended no-follow protection. An attacker with access to a virt-launch…

nvdaltovulnerabilidad CVSS 7.3 NVD

L Alto vulnerabilidad

24/06/2026

[CVE-2026-53009] In the Linux kernel, the following vulnerability has been resolved: ice: fix double-free of tx_buf …

In the Linux kernel, the following vulnerability has been resolved: ice: fix double-free of tx_buf skb If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() frees the skb, but the 'first' tx_buf still points to it and is marked as valid (ICE_TX_BUF_SKB). 'next_to_use' remains unchanged, so the potential problem will likely fix itself when the next packet is transmitted and …

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

24/06/2026

[CVE-2026-53000] In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu t…

In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Florian Westphal says: "Historically this is not an issue, even for normal base hooks: the data path doesn't use the original nf_hook_ops that are used to register the callbacks. However, in v5.14 I added the ability to dump the active netfilter hooks from userspace. This code will…

nvdaltovulnerabilidad CVSS 7.8 NVD

R Alto vulnerabilidad

23/06/2026

[CVE-2026-12112] A flaw was found in the foreman-mcp-server. A session management vulnerability in the MCP Server all…

A flaw was found in the foreman-mcp-server. A session management vulnerability in the MCP Server allows unauthenticated attackers to hijack active administrative sessions due to an improper cache of authenticated client connections, by trusting a non-secret session ID without re-validating authentication tokens and by logging all newly created session IDs to standard logs. This issue can result in…

nvdaltovulnerabilidad CVSS 7.8 NVD

T Alto vulnerabilidad

23/06/2026

[CVE-2023-54365] Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 req…

Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inherited from the Go standard library's HTTP/2 implementation (CVE-2023-44487 / CVE-2023-39325, the 'Rapid Reset' technique). A remote attacker can rapidly create and cancel HTTP/2 streams to exhaust server resources and cause service unavailability.

nvdaltovulnerabilidad CVSS 7.5 NVD

R Alto vulnerabilidad

22/06/2026

[CVE-2026-54099] A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platf…

A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validates that a Certificate Signing Request contains the organization system:wicd-nodes but does not reject additional organization values such as system:masters. A compromised Windows worker node that holds WICD credentials can submit a CSR that is auto-approved and…

nvdaltovulnerabilidad CVSS 8.8 NVD

R Alto vulnerabilidad

22/06/2026

[CVE-2026-54100] A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platf…

A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. WMCO establishes SSH connections to Windows worker nodes without verifying the remote server host key. An adjacent-network attacker who can intercept or redirect WMCO's SSH session can capture WICD and kubelet bootstrap credentials transferred during node configuration, enabling compromise of W…

nvdaltovulnerabilidad CVSS 8.3 NVD

E Alto vulnerabilidad

17/06/2026

[CVE-2026-47774] Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to vers…

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a vulnerability in Envoy's HTTP/2 downstream request processing allows an unauthenticated remote client to trigger excessive memory consumption, potentially resulting in OOM termination of the Envoy process and denial of service. The issue arises from the co…

nvdaltovulnerabilidad CVSS 7.5 NVD

A Alto vulnerabilidad

13/06/2026

[CVE-2026-54230] A symlink following vulnerability was found in the ABRT post-create event handler scripts in librepo…

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and writes content to the symlink target, allowing arbitrary file overwrites on the system.

nvdaltovulnerabilidad CVSS 7.0 NVD

V Alto vulnerabilidad

10/06/2026

[CVE-2026-41731] JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trust…

JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Combined with Jackson's default bean deserialization, a producer could supply crafted header values that caused the consumer to deserialize arbitrary JDK types. Affected versions: Spring f…

nvdaltovulnerabilidad CVSS 8.1 NVD

I Alto vulnerabilidad

09/06/2026

[CVE-2025-71319] image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to …

image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-type. Attackers can trigger an infinite loop in the JXL or HEIF image parsers by providing a crafted image containing a box with a size of zero, causing the offset…

nvdaltovulnerabilidad CVSS 7.5 NVD

X Alto vulnerabilidad

05/06/2026

[CVE-2026-50264] An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuff…

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for privilege escalation if the X server runs as root.

nvdaltovulnerabilidad CVSS 7.8 NVD

X Alto vulnerabilidad

05/06/2026

[CVE-2026-50258] A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has mu…

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify or clamp non-canonical key types to XkbMaxShiftLevel. A client can change key types to excessive shift levels and trigger stack overflows. This is caused by an incomplete fix of CVE-2025-26597. This may…

nvdaltovulnerabilidad CVSS 7.8 NVD

X Alto vulnerabilidad

05/06/2026

[CVE-2026-50259] A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() …

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed by key type index. The helper function CheckKeyTypes() writes to this buffer at a client-controlled offset, allowing a stack buffer overflow. This may be used to crash the server, or for privilege escalation if the X server runs as root.

nvdaltovulnerabilidad CVSS 7.8 NVD

X Alto vulnerabilidad

05/06/2026

[CVE-2026-50260] A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that s…

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroying those counters via a second client connection. This may be used to crash the server, or for privilege escalation if the X server runs as root.

nvdaltovulnerabilidad CVSS 7.8 NVD

X Alto vulnerabilidad

05/06/2026

[CVE-2026-50261] A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client …

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via a second client connection while changing those counters. This may be used to crash the server, or for privilege escalation if the X server runs as root.

nvdaltovulnerabilidad CVSS 7.8 NVD

X Alto vulnerabilidad

05/06/2026

[CVE-2026-50256] A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between …

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias target name length is 1024 bytes. A font alias name between 257 and 1023 bytes causes the X server to c…

nvdaltovulnerabilidad CVSS 7.8 NVD