Alertas de Seguridad de la Información

M Alto vulnerabilidad

25/06/2026

[CVE-2026-54830] Unauthenticated Broken Access Control in Five Star Restaurant Reservations <= 2.7.19 versions.

Unauthenticated Broken Access Control in Five Star Restaurant Reservations

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-54838] Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions.

Subscriber SQL Injection in WC Vendors Marketplace

nvdaltovulnerabilidad CVSS 8.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-54821] Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions.

Subscriber Sensitive Data Exposure in Visual Link Preview

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-54822] Subscriber SQL Injection in SALESmanago & Leadoo <= 3.11.2 versions.

Subscriber SQL Injection in SALESmanago & Leadoo

nvdaltovulnerabilidad CVSS 8.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-54828] Unauthenticated Broken Access Control in Motors <= 1.4.109 versions.

Unauthenticated Broken Access Control in Motors

nvdaltovulnerabilidad CVSS 7.5 NVD

D Alto vulnerabilidad

25/06/2026

[CVE-2026-49506] Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathn…

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

nvdaltovulnerabilidad CVSS 7.2 NVD

S Alto vulnerabilidad

25/06/2026

[CVE-2026-47150] In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds…

In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write and terminate the process. The size and location of this write is limited. These messages must come from a device that has already joined the network. Only devices supporting the IAS Zone cluster may be impacted.

nvdaltovulnerabilidad CVSS 7.1 NVD

S Alto vulnerabilidad

25/06/2026

[CVE-2026-47151] In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds w…

In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds writes into Door Lock schedule state. The size and location of this data is limited. These messages must come from a device that has already joined the network. Only devices supporting the Door Lock cluster may be impacted.

nvdaltovulnerabilidad CVSS 7.1 NVD

D Alto vulnerabilidad

25/06/2026

[CVE-2026-46733] Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Acces…

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

nvdaltovulnerabilidad CVSS 7.8 NVD

D Alto vulnerabilidad

25/06/2026

[CVE-2026-46734] Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certifica…

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

nvdaltovulnerabilidad CVSS 7.3 NVD

S Alto vulnerabilidad

25/06/2026

[CVE-2026-47147] In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-…

In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads. A limited amount of data from RAM is read back to the requester. The size and location of this data is limited. These requests must come from a device that has already joined the network. Only devices supporting the OTA Server cluster may be impacted.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-27366] Unauthenticated Broken Access Control in MainWP Child <= 6.1.1 versions.

Unauthenticated Broken Access Control in MainWP Child

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-33612] A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to …

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.

nvdaltovulnerabilidad CVSS 7.5 NVD

L Alto vulnerabilidad

25/06/2026

[CVE-2026-53270] In the Linux kernel, the following vulnerability has been resolved: ipvs: clear the svc scheduler p…

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear the svc scheduler ptr early on edit ip_vs_edit_service() while unbinding the old scheduler clears the svc->scheduler ptr after the scheduler module initiates RCU callbacks. This can cause packets to use the old scheduler at the time when svc->sched_data is already freed after RCU grace period. Fix it by clearing the…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

25/06/2026

[CVE-2026-53272] In the Linux kernel, the following vulnerability has been resolved: erofs: fix use-after-free on sb…

In the Linux kernel, the following vulnerability has been resolved: erofs: fix use-after-free on sbi->sync_decompress z_erofs_decompress_kickoff() can race with filesystem unmount, causing a use-after-free on sbi->sync_decompress. When I/O completes, z_erofs_endio() calls z_erofs_decompress_kickoff() to queue z_erofs_decompressqueue_work() asynchronously. Then, after all folios are unlocked, un…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

25/06/2026

[CVE-2026-53273] In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-f…

In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a199 ("tee: optee: Fix supplicant wait loop") made the client wait as killable so it can be interrupted during shutdown or after a supplicant crash. This changes the original lifetime expectations: the client task can now terminate whil…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

25/06/2026

[CVE-2026-53275] In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free…

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free when processing MLD queries When processing an MLD query, a pointer to the multicast group address is retrieved when initially parsing the packet. This pointer is later dereferenced without being reloaded despite the fact that the skb header might have been reallocated following the pskb_may_pull(…

nvdaltovulnerabilidad CVSS 8.8 NVD

L Alto vulnerabilidad

25/06/2026

[CVE-2026-53276] In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix a use-after…

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer In iso_sock_rebind_bc(), the bis pointer is cached, then the socket lock is dropped: bis = iso_pi(sk)->conn->hcon; /* Release the socket before lookups since that requires hci_dev_lock * which shall not be acquired while holding sock_lock for proper * ordering. …

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

25/06/2026

[CVE-2026-53277] In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock …

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walk_s1() and kvm_walk_nested_s2() expect to be called while holding kvm->srcu to guard against memslot changes. While this is generally the case, __kvm_at_s12() and __kvm_find_s1_desc_level() call into the respective walkers without taking k…

nvdaltovulnerabilidad CVSS 8.8 NVD

L Alto vulnerabilidad

25/06/2026

[CVE-2026-53262] In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference …

In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() pppol2tp_ioctl() read sock->sk->sk_user_data directly without any locks or reference counting. If a controllable sleep was induced during copy_from_user() (e.g. via a userfaultfd page fault sleep), a concurrent socket close could trigger pppol2tp_session_close() asyn…

nvdaltovulnerabilidad CVSS 7.8 NVD