Alertas de Seguridad de la Información

M Alto vulnerabilidad

01/07/2026

[CVE-2026-20191] A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arb…

A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.  This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files …

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

01/07/2026

[CVE-2026-20213] A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attack…

A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this…

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

01/07/2026

[CVE-2026-20214] A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attac…

A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit th…

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

01/07/2026

[CVE-2026-20215] A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attack…

A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in 7z files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this…

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

01/07/2026

[CVE-2026-20216] A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, re…

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A succes…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-8857] A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program fi…

A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php. This issue affects timeline: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-58036] Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Med…

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryAllUsers.Php, includes/Api/ApiQueryUsers.Php, includes/Permissions/PermissionManager.Php, includes/User/UserGroupManager.Php.

nvdaltovulnerabilidad CVSS 7.5 NVD

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24246] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper con…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24247] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserializat…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24248] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper con…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24249] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserializat…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24250] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper val…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24251] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper con…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-24260] NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-…

NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and data tampering.

nvdaltovulnerabilidad CVSS 8.5 NVD

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24264] NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improp…

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highly compressed data. A successful exploit of this vulnerability might lead to denial of service.

nvdaltovulnerabilidad CVSS 7.5 NVD

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24240] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserializat…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24242] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side …

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24243] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserializat…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24244] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserializat…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD

N Alto vulnerabilidad

01/07/2026

[CVE-2026-24245] NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserializat…

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

nvdaltovulnerabilidad CVSS 7.8 NVD