Alertas de Seguridad de la Información

M Alto vulnerabilidad

03/07/2026

[CVE-2026-58293] External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized atta…

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

02/07/2026

[CVE-2026-5821] The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to …

The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4. This is due to insufficient path validation in the Image_Backup::remove() function where backup file paths stored in post meta are used directly in file deletion operations without verifying they are within the uploads directory. The plugin stores backup file paths in the image_…

nvdaltovulnerabilidad CVSS 8.1 NVD

C Alto vulnerabilidad

30/06/2026

[CVE-2026-10816] Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, …

Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

28/06/2026

[CVE-2026-8095] The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File …

The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions up to and including 23.6. This is due to a case-sensitive bypass of the wpfm_dir_path parameter sanitization in the wpfm_file_meta_update AJAX handler, where supplying WPFM_DIR_PATH in uppercase evades the unset check and is normalized to wpfm_dir_path by sanitize_key() during u…

nvdaltovulnerabilidad CVSS 8.1 NVD

D Alto vulnerabilidad

26/06/2026

[CVE-2026-47214] Docling simplifies document processing by parsing diverse formats and providing integrations with th…

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0.

nvdaltovulnerabilidad CVSS 7.1 NVD

F Alto vulnerabilidad

25/06/2026

[CVE-2025-71324] Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /a…

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal bey…

nvdaltovulnerabilidad CVSS 7.5 NVD

P Alto vulnerabilidad

25/06/2026

[CVE-2026-55700] pnpm is a package manager. From 11.3.0 until 11.5.3, `pnpm stage download` derived a local filename …

pnpm is a package manager. From 11.3.0 until 11.5.3, `pnpm stage download` derived a local filename from registry-controlled package name and version fields. A crafted manifest could escape the selected download directory and overwrite another reachable file. The merged fix validates both fields, derives one safe filename, and verifies the final destination before writing. This vulnerability is fi…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-55477] 3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated admini…

3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code execution and persistent access as the user running Xray (including root when Xray is running as root). …

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

24/06/2026

[CVE-2026-48720] Warp is an agentic development environment. From 0.2025.03.05.08.02.stable_00 until 0.2026.05.06.15.…

Warp is an agentic development environment. From 0.2025.03.05.08.02.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepts non-inline `OSC 1337;File` payloads from terminal output and materialize the decoded payload as a local file without an additional confirmation step. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

nvdaltovulnerabilidad CVSS 8.8 NVD

J Alto vulnerabilidad

19/06/2026

[CVE-2026-53915] In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configu…

In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration

nvdaltovulnerabilidad CVSS 7.1 NVD

O Alto vulnerabilidad

18/06/2026

[CVE-2025-52465] GeoServer is an open source server that allows users to share and edit geospatial data. Prior to ver…

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a vulnerability exists that allows an authenticated administrator with access to GeoServer's security system to pass arbitrary file names to the Master Password Dump web page and create files containing the master password in plaintext. The provided file name must be an abso…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

16/06/2026

[CVE-2026-10303] In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not s…

In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not strictly validated against RFC 8555 before being used in challenge-file handling, allowing a maliciously crafted token to influence local path/filename usage during validation. An attacker who can supply ACME challenge responses to getssl (for example, a malicious or compromised CA endpoint, or an on…

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

14/06/2026

[CVE-2026-11527] Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via…

Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle. Config::IniFiles::_make_filehandle opens a filename argument with Perl's 2-arg open(), so a filename that begins or ends with a pipe ("| cmd", "cmd |") or begins with a redirect ("> path", ">> path") is run as a command or redirect rather t…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

03/06/2026

[CVE-2026-35079] The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files…

The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

03/06/2026

[CVE-2026-35080] The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local f…

The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

03/06/2026

[CVE-2026-35076] The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local fi…

The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

03/06/2026

[CVE-2026-35077] The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local …

The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

03/06/2026

[CVE-2026-35078] The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local file…

The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

03/06/2026

[CVE-2026-10694] A vulnerability was detected in SourceCodester Online Food Ordering System 2.0. Affected by this iss…

A vulnerability was detected in SourceCodester Online Food Ordering System 2.0. Affected by this issue is the function include of the file /index.php. The manipulation of the argument page results in file inclusion. The attack can be launched remotely. The exploit is now public and may be used.

nvdaltovulnerabilidad CVSS 7.3 NVD