Alertas de Seguridad de la Información

M Alto vulnerabilidad

18/06/2026

[CVE-2026-56020] The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a…

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

nvdaltovulnerabilidad CVSS 8.1 NVD

H Alto vulnerabilidad

18/06/2026

[CVE-2026-55203] HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fc…

HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, the drl field wraps to 0, causing incorrect record consumption and allowing malicious FastCGI backends to desynchronize the FCGI framing parser, potential…

nvdaltovulnerabilidad CVSS 7.5 NVD

H Alto vulnerabilidad

18/06/2026

[CVE-2026-55204] HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability i…

HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_defrag() when the memory pool is exhausted. An attacker can trigger HPACK dynamic table insertions under memory pressure to dereference a NULL pointer and crash HAProxy worker processes, causing denial o…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-55237] AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificia…

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions prior to 0.6.62 have a DOM-based Cross-Site Scripting (XSS) vulnerability in AutoGPT's signup page. The application improperly trusts a URL parameter (`next`), which is passed to `router.push`. An attacker can craft a malicious link that, when opened by an authenticat…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-54104] The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civil…

The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) trusts client-provided values for the 'epds_role_id' parameter without verification, allowing a remote, authenticated attacker to escalate their own privileges.

nvdaltovulnerabilidad CVSS 8.8 NVD

I Alto vulnerabilidad

18/06/2026

[CVE-2026-38718] InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discov…

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a buffer overflow vulnerability in the device registration function. This vulnerability could allow an attacker to cause a denial of service attack on the remote target device.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2025-53114] CometD is a scalable comet implementation for web messaging. In versions 5.0.0 through 5.0.22, 6.0.0…

CometD is a scalable comet implementation for web messaging. In versions 5.0.0 through 5.0.22, 6.0.0 through 6.0.18, 7.0.0 through 7.0.18, and 8.0.0 through 8.0.8, bad clients that always send a fixed batch value when the server is using the acknowledgement extension may cause the unacknowledged message queue to grow indefinitely, eventually causing an `OutOfMemoryError`. Versions 5.0.23, 6.0.19, …

nvdaltovulnerabilidad CVSS 7.5 NVD

E Alto vulnerabilidad

18/06/2026

[CVE-2026-44691] In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/t…

In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/tasks.json, .vscode/tasks.json) could be executed without requiring workspace trust. An attacker could craft a malicious repository that, when cloned and opened in Theia, leads to execution of arbitrary commands with the user's privileges. In combination with AI chat features and a workspace .theia/s…

nvdaltovulnerabilidad CVSS 8.8 NVD

E Alto vulnerabilidad

18/06/2026

[CVE-2026-46580] In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a…

In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded and could override or extend the AI agent's system prompts. An attacker could craft a malicious repository containing prompt template files that, when the workspace was opened in Theia, replaced the AI's system instructions with attacker-controlled content (indir…

nvdaltovulnerabilidad CVSS 8.8 NVD

E Alto vulnerabilidad

18/06/2026

[CVE-2026-44688] In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory …

In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory names as part of its prompt context without distinguishing them from system instructions. An attacker could craft a malicious repository with adversarial directory or file names that, when analyzed by the AI agent, would cause the agent to follow attacker-controlled instructions (indirect prompt inj…

nvdaltovulnerabilidad CVSS 8.8 NVD

O Alto vulnerabilidad

18/06/2026

[CVE-2025-52465] GeoServer is an open source server that allows users to share and edit geospatial data. Prior to ver…

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a vulnerability exists that allows an authenticated administrator with access to GeoServer's security system to pass arbitrary file names to the Master Password Dump web page and create files containing the master password in plaintext. The provided file name must be an abso…

nvdaltovulnerabilidad CVSS 7.2 NVD

O Alto vulnerabilidad

18/06/2026

[CVE-2025-27511] GeoServer is an open source server that allows users to share and edit geospatial data. Prior to ver…

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perform a JNDI attack through specially crafted DB2 jdbc url leading to to Remote Code Execution (RCE). Version 2.27.0 fixes the issue.

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-8461] An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV de…

An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution. This vulnerability is associated with the file libavcodec/magicyuv.C. This issue affects FFmpeg before version 8.1.2.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-56012] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i…

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows Blind SQL Injection. This issue affects Media LIbrary Assistant: from n/a through 3.35.

nvdaltovulnerabilidad CVSS 8.5 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-42487] HVM guest I/O port accesses are subject to either emulation or at least translation. Translations a…

HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model (via XEN_DOMCTL_ioport_mapping), and hence the linked list used may changed at any time. Traversal of those lists (while handling guest I/O port accesses) therefore needs synchronizing with updates, which was missing so far.

nvdaltovulnerabilidad CVSS 7.9 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-42488] Some shadow paging errors paths will switch the page-tables without updating the currently running v…

Some shadow paging errors paths will switch the page-tables without updating the currently running vCPU reference. This causes a mismatch between the loaded page-tables and the mapcache metadata which can lead to corruption of the mapcache.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-55744] Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the Pe…

Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the Personal File Storage (PFS) module. In modules/pfs/inc/pfs.main.php, the file upload action ('a=upload') processes uploaded files without calling cot_check_xg() to validate the anti-CSRF token, even though sibling actions such as 'delete' (line 272) do. A remote attacker who lures an authenticated use…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-55746] Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to stored Cross-Site Scripting in the P…

Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to stored Cross-Site Scripting in the Personal File Storage (PFS) module. A folder title (pff_title) is imported with the 'TXT' filter, which does not strip or encode HTML (the tag check in cot_import is disabled), so an authenticated user can store HTML/JavaScript in a folder title. In modules/pfs/inc/pfs.main.php the title is assigned …

nvdaltovulnerabilidad CVSS 7.6 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-11395] The CF7 to Webhook plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions…

The CF7 to Webhook plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.0 via the pull_the_trigger. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Exploitation requires that the admin-co…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-55741] Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the ad…

Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the administration configuration handler. In system/admin/admin.config.php, the configuration update action ('a=update') processes POST data via cot_config_update_options() without calling cot_check_xg() to validate the anti-CSRF token (the 'x' parameter), unlike other admin handlers (e.g. admin.structure…

nvdaltovulnerabilidad CVSS 8.8 NVD