Alertas de Seguridad de la Información

C Alto vulnerabilidad

08/07/2026

[CVE-2026-55436] Coder allows organizations to provision remote development environments via Terraform. Starting in v…

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, the AI Bridge Proxy (`aibridgeproxyd`) created a goproxy server whose default transport set `InsecureSkipVerify: true` and only assigned a secure transport when an upstream proxy was configured. In the default configuration (no upstream…

nvdaltovulnerabilidad CVSS 7.4 NVD

C Alto vulnerabilidad

08/07/2026

[CVE-2026-55427] Coder allows organizations to provision remote development environments via Terraform. Prior to vers…

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `coder config-ssh` wrote server-supplied SSH settings (`HostnameSuffix`, `SSHConfigOptions`) into the user's `~/.ssh/config` without sanitizing embedded newlines or restricting directives so a malicious or compromised Coder server could inject arbitrary SSH c…

nvdaltovulnerabilidad CVSS 8.3 NVD

C Alto vulnerabilidad

08/07/2026

[CVE-2026-55429] Coder allows organizations to provision remote development environments via Terraform. Prior to vers…

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `UpsertWorkspaceApp` overwrites an existing app's `agent_id` on a primary-key conflict and `insertAgentApp` accepts the app ID from the provisioner's `CompleteJob` payload without verifying it belongs to the workspace being built. `CompleteJob` runs under `db…

nvdaltovulnerabilidad CVSS 8.7 NVD

C Alto vulnerabilidad

07/07/2026

[CVE-2026-55076] Coder allows organizations to provision remote development environments via Terraform. Prior to vers…

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, Coder's OIDC callback checked `email_verified` with a direct Go `bool` type assertion. When an IdP returned the claim as a non-boolean (for example the string `"false"`) or omitted it, the assertion failed open and the email was treated as verified. Combined …

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-14895] String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service…

String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. The trim and rtrim functions stripped trailing whitespace with s/\s*$//u. Because \s* matches greedily and the $ anchor fails whenever a non-whitespace character follows the whitespace, the regex engine retries the match at each offset of a long whitespace run, producing quadratic backtracking. T…

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

07/07/2026

[CVE-2026-55075] Coder allows organizations to provision remote development environments via Terraform. Prior to vers…

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, two flaws in Coder's OIDC login chained into account takeover. Email-based user matching fell back to linking by email without checking for an existing link to a different IdP subject and the `email_verified` claim was only enforced when present as a boolean …

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-42958] The application contains a use-after-free vulnerability that can be exploited to cause memory corrup…

The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing specially crafted files. This could allow an attacker to execute arbitrary code in the context of the current process.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-49033] The application contains a stack-based buffer overflow vulnerability that can be exploited by an att…

The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-49229] Actual is a local-first personal finance app. Prior to 26.6.0, in OpenID multi-user mode, disabling …

Actual is a local-first personal finance app. Prior to 26.6.0, in OpenID multi-user mode, disabling a user only blocks future OpenID login for that identity, while existing Actual session tokens for the disabled user remain valid. The shared session validation path accepts any existing token row that has not expired without checking whether the associated user is still enabled, allowing a disabled…

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-58583] FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows…

FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical memory mapping at \Device\PhysicalMemory. Fixed in version 1.0.7.6. The fixed driver is currently available in the Windows 11 25H2 HLK (Hardware Lab Kit). The fixed driver may be available through Windows Update or from L…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-59707] LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/ap…

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges w…

nvdaltovulnerabilidad CVSS 8.6 NVD

G Alto vulnerabilidad

07/07/2026

[CVE-2026-58469] GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in …

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespa…

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

07/07/2026

[CVE-2026-44454] Coder allows organizations to provision remote development environments via Terraform. Prior to vers…

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7 and 2.30.2, the `dotfiles` registry module passed unsanitized user input to shell commands, allowing arbitrary code execution inside a provisioned workspace. Any user who supplied a crafted `dotfiles_uri` value (for example, one containing shell command substitution such as `$(...)`) cou…

nvdaltovulnerabilidad CVSS 8.1 NVD

O Alto vulnerabilidad

07/07/2026

[CVE-2026-49471] Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilitie…

Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port, with no authentication, no CSRF protection, and no Host header validation. A DNS rebinding attack allows a malicious webpage to reach this API from any browser and write arbitrary c…

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-7017] HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect target…

HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx redirect, `_maybe_redirect` follows the `Location:` header and `_prepare_headers_and_cb` re-merges the caller's `headers` argument into the new request, without checking whether the redirect target shares an origin with the original URL. Caller-supplied `Authorizati…

nvdaltovulnerabilidad CVSS 7.1 NVD

J Alto vulnerabilidad

07/07/2026

[CVE-2026-48948] An improper access check allows user to download vcard exports of com_contact contacts that are inac…

An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-23698] Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin …

Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which extracts contents directly into the modules/ directory under the web root without validating file types beyond the manife…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-57851] MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys ker…

MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without administrator privileges. Attackers can exploit the accessible device object through IOCTL handlers to manipulate kernel …

nvdaltovulnerabilidad CVSS 7.8 NVD

E Alto vulnerabilidad

07/07/2026

[CVE-2026-13020] A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions …

A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes. A remote, unauthorized attacker may assume ownership of a user’s account by manipulating this mechanism. ArcGIS Administrators should configure an email server with ArcGIS Enterprise to facilitate user self-service password recovery. The ability for…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

07/07/2026

[CVE-2026-23697] Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileg…

Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylist in config.inc.php which omits the .phar extension. The uploaded file is stored with its original .phar extension under the web-accessible s…

nvdaltovulnerabilidad CVSS 8.8 NVD