Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers Password Generator VPN PSK Generator
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV Vigía LATAM
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 2 horas
25,029
Total alertas
5084
Críticas
19120
Altas
8
Ransomware
2671
Esta semana
RSS
Alta × Limpiar todo ×
M Alto vulnerabilidad
08/09/2026
CVE-2026-70582 Windows Management Instrumentation Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-70582 Windows Management Instrumentation Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-71338 Windows Failover Cluster Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-71338 Windows Failover Cluster Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-71339 Windows Installer Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-71339 Windows Installer Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-72935 Windows NTFS Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-72935 Windows NTFS Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-72948 Windows DNS Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-72948 Windows DNS Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-69361 Microsoft Exchange Server Spoofing Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-69361 Microsoft Exchange Server Spoofing Vulnerability. Tipo: Suplantación (Spoofing).
exchangespoofing Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-69469 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-69469 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
08/09/2026
CVE-2026-69642 Skype for Business Spoofing Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-69642 Skype for Business Spoofing Vulnerability. Tipo: Suplantación (Spoofing).
spoofing Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-69690 Microsoft Office SharePoint Spoofing Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-69690 Microsoft Office SharePoint Spoofing Vulnerability. Tipo: Suplantación (Spoofing).
officespoofing Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-72980 Windows Hello Security Feature Bypass Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-72980 Windows Hello Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.
windowssfb Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-77892 Windows Boot Manager Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-77892 Windows Boot Manager Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-72947 Windows File History Service Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-72947 Windows File History Service Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-66816 Microsoft SQL Server Security Feature Bypass Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-66816 Microsoft SQL Server Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.
sql-serversfb Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
[CVE-2026-76967] SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally…
SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup. An attacker with low privileges on the local system could replace this data with specially crafted content. When the application is next launched, the crafted content is processed and could lead to arbitrary code execution in the context of the user. This res…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-76958] SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources i…
SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components. An attacker with low privileges could submit specially crafted XML payloads containing malicious external entity declarations. Successful exploitation could allow the attacker to read sensitive file contents from the server and expose them through monitoring or logging…
nvdaltovulnerabilidad CVSS 8.5 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
08/09/2026
[CVE-2026-66767] SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a…
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially crafted packet that triggers reprocessing of a previously buffered user request, potentially hijacking another user's session under narrow timing conditions. Successful exploitation could result in high impact on confidentiality and integrity, with low impact on availability of the applic…
nvdaltovulnerabilidad CVSS 7.7 NVD
F Alto vulnerabilidad
08/09/2026
Broken Access control on Websocket streams
Fortinet PSIRT publica advisory de seguridad: Broken Access control on Websocket streams. Tipo: Control de Acceso Inadecuado. Producto afectado: Fortisoar.
firewall PAN PSIRT
F Alto vulnerabilidad
08/09/2026
Workflow session email approval process bypass
Fortinet PSIRT publica advisory de seguridad: Workflow session email approval process bypass. Tipo: Control de Acceso Inadecuado. Producto afectado: Fortimanager.
firewallfortimanager PAN PSIRT
M Alto vulnerabilidad
07/09/2026
[CVE-2026-86544] knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code acti…
knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent calls.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
07/09/2026
[CVE-2026-86439] knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing atta…
knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, create, overwrite and delete files outside the project directory. Attackers can supply path arguments containing directory traversal sequences to access arbitrary Markdown files accessible to the server process.
nvdaltovulnerabilidad CVSS 8.8 NVD