Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers Password Generator VPN PSK Generator
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV Vigía LATAM
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 6 min
24,745
Total alertas
5038
Críticas
18937
Altas
8
Ransomware
2781
Esta semana
RSS
Alta × Limpiar todo ×
M Alto vulnerabilidad
09/09/2026
Inyección SQL alta en Dell SCG 5.0 afecta sistemas de almacenamiento empresarial
Dell SCG 5.0 (versiones Appliance anteriores a 5.36.00.16 y Application anteriores a 5.36.00.00) contiene una vulnerabilidad de inyección SQL (CVSS 7.2) que permite a atacantes con privilegios elevados y acceso remoto comprometer la integridad de datos y obtener acceso no autorizado. Afecta principalmente a infraestructuras de almacenamiento en centros de datos de empresas medianas y grandes en LATAM.
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
09/09/2026
[CVE-2026-78485] Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5…
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
09/09/2026
[CVE-2026-78490] Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5…
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to client-side request forgery.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
09/09/2026
[CVE-2026-78492] Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5…
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
nvdaltovulnerabilidad CVSS 7.4 NVD
M Alto vulnerabilidad
09/09/2026
[CVE-2026-79637] Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5…
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
09/09/2026
[CVE-2026-79635] Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5…
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
09/09/2026
[CVE-2026-79641] Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5…
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.
nvdaltovulnerabilidad CVSS 7.5 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
09/09/2026
[CVE-2026-65181] Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges t…
Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
09/09/2026
[CVE-2026-87794] bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip functi…
bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend. Attackers can supply a malicious destination path combined with crafted source entries to execute arbitrary commands with Node.js process privileges. Fixed in 2.2.7 and 3.0.3.
nvdaltovulnerabilidad CVSS 8.4 NVD
M Alto vulnerabilidad
09/09/2026
[CVE-2026-87795] zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompr…
zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untrusted offset or length values to read native heap memory into the compression dictionary, typically causing JVM crashes.
nvdaltovulnerabilidad CVSS 8.2 NVD
P Alto vulnerabilidad
09/09/2026
CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW). Tipo: Cross-Site Scripting (XSS). Producto afectado: PAN-OS.
firewallngfwpan-os PAN PSIRT
P Alto vulnerabilidad
09/09/2026
CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities
Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM). Tipo: Escalación de Privilegios. Producto afectado: GlobalProtect.
firewallngfwglobalprotect PAN PSIRT
P Alto vulnerabilidad
09/09/2026
CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing
Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing (Severity: HIGH). Tipo: Desbordamiento de Búfer. Producto afectado: PAN-OS.
firewallngfwpan-os PAN PSIRT
P Alto vulnerabilidad
09/09/2026
PAN-SA-2026-0012 Chromium: Monthly Vulnerability Update (September 2026)
Palo Alto Networks PSIRT publica advisory de seguridad: PAN-SA-2026-0012 Chromium: Monthly Vulnerability Update (September 2026) (Severity: HIGH). Tipo: Vulnerabilidad de seguridad. Producto afectado: Palo Alto Networks.
firewallngfw PAN PSIRT
P Alto vulnerabilidad
09/09/2026
CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability
Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability (Severity: MEDIUM). Tipo: Escalación de Privilegios. Producto afectado: Cortex XDR.
firewallngfwcortex-xdr PAN PSIRT

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
P Alto vulnerabilidad
09/09/2026
CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux
Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux (Severity: MEDIUM). Tipo: Divulgación de Información. Producto afectado: Prisma Access.
firewallngfwprisma-access PAN PSIRT
M Alto vulnerabilidad
09/09/2026
[CVE-2026-80099] Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because th…
Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the `authenticate()` method — registered on the `rest_authentication_errors` filter and therefore evaluated for every unauthenticated REST API request — performs an HMAC-style Bearer token comparison that degenerates when `HiiveConnection::g…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
09/09/2026
[CVE-2026-80122] Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5…
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
09/09/2026
[CVE-2026-87766] A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new ro…
A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is GHSA-pxhw-h44j-8pfx. It is fixed in bubblewrap 0.12.0.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
09/09/2026
[CVE-2026-14359] The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in …
The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0. This is due to the add_user_in_waiting_list() function registered on the wp_ajax_yith_wcwtl_add_user action being missing both a capability check and a nonce verification, and using parse_str() + extract() to import attacker-controlled variables from $_POST['pa…
nvdaltovulnerabilidad CVSS 8.8 NVD