Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Multiple Vendors" — 15104 resultados ✕ Limpiar búsqueda
24,527
Total alertas
5008
Críticas
18808
Altas
8
Ransomware
2741
Esta semana
RSS
Alta × Limpiar todo ×
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84761] Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions.
Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84763] Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions.
Unauthenticated Cross Site Scripting (XSS) in RTMKit
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84765] Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84756] Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.
Subscriber Privilege Escalation in WCFM Membership
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84757] Unauthenticated Settings Change in WP Compress <= 7.21.28 versions.
Unauthenticated Settings Change in WP Compress
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-84752] Contributor PHP Object Injection in RTMKit <= 2.1.5 versions.
Contributor PHP Object Injection in RTMKit
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-81292] Unauthenticated Cross Site Scripting (XSS) in Simple Payment <= 2.5.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Simple Payment
nvdaltovulnerabilidad CVSS 7.1 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
03/09/2026
[CVE-2026-81295] Unauthenticated Cross Site Scripting (XSS) in Under Construction <= 5.82 versions.
Unauthenticated Cross Site Scripting (XSS) in Under Construction
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-81300] Unauthenticated Cross Site Scripting (XSS) in Calculation For Contact Form 7 <= 1.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Calculation For Contact Form 7
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-81773] Unauthenticated Cross Site Scripting (XSS) in Ninja Forms File Uploads Extension <= 3.3.26 versions…
Unauthenticated Cross Site Scripting (XSS) in Ninja Forms File Uploads Extension
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-81776] Unauthenticated Cross Site Scripting (XSS) in WP QuickLaTeX <= 3.8.8 versions.
Unauthenticated Cross Site Scripting (XSS) in WP QuickLaTeX
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-85137] A security vulnerability has been detected in SeaCMS up to 13.6. This impacts the function parseIf o…
A security vulnerability has been detected in SeaCMS up to 13.6. This impacts the function parseIf of the file seacms_locoy_news.php of the component Locoy Collector. The manipulation of the argument pwd leads to code injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-85138] A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file w…
A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of the component WeChat Module. The manipulation of the argument Content results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-83961] ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege es…
ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction. Scope is changed.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-75034] A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for …
A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a captured assertion could replay it once against every other replica to obtain additional authenticated sess…
nvdaltovulnerabilidad CVSS 7.4 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
03/09/2026
[CVE-2026-75035] A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector nami…
A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store dropped its internal owner filter instead of returning an empty result. Any authenticated user could therefore list and watch every other user's tokens, disclosing token metadata and the stored salted hash of the bearer token. This issue affec…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-71963] Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulner…
Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a malicious repository with a crafted .git/config that sets core.fsmonitor to an attacker-controlled command. When a user opens the malicious repository and sends any message, the agent triggers a git status index refresh wh…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-55658] Gardens v2 is a modular governance framework that enables communities to create and manage multiple …
Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In 3e595f3 and prior, when a streaming proposal is funded, the cluster of streaming contracts moves real pool funds into the proposal's StreamingEscrow to back the Superfluid constant flow agreement (the CFA deposit, plus a 0.5 per…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-48486] Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment (Po…
Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment (PoC+) consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock() allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative totalFeeCashBackNqt value. The vulnerability was introduced when the SMART_FEES hardfork (block ~1…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-85211] Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects …
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.
nvdaltovulnerabilidad CVSS 7.7 NVD