Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 1 hora
13,735
Total alertas
3106
Críticas
10357
Altas
8
Ransomware
1065
Esta semana
RSS
Alta × alto × Limpiar todo ×
M Alto vulnerabilidad
18/08/2026
[CVE-2026-50186] 4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an au…
4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project manager to supply traversal sequences in the filename parameter of GET /exports/:id/:filename. In server/api/controllers/boards/download.js, the decoded inputs.filename value is passed to path.join() beneath private/exports// without containment validation. A crafted val…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-50191] 4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerabl…
4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationEnabled, and ssoRegistrationEnabled are enabled and Google, GitHub, Microsoft, or OIDC SSO is configured. The POST /api/register endpoint permits creation of an unverified local account with a victim's email address, and POST /api/…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73939] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks o…
nvdaltovulnerabilidad CVSS 8.6 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73931] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of…
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73933] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible…
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73934] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (com…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73935] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (comp…
nvdaltovulnerabilidad CVSS 7.5 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73936] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (comple…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73937] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (comp…
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73938] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Helidon acc…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73925] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 1.4.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data o…
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73927] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (compl…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73928] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of…
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73929] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of…
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73915] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (comple…
nvdaltovulnerabilidad CVSS 7.5 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73918] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible…
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73903] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73907] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Helidon ac…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73908] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Helidon acc…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-73902] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (compl…
nvdaltovulnerabilidad CVSS 7.5 NVD