Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,181
Total alertas
4701
Críticas
16892
Altas
8
Ransomware
1055
Esta semana
RSS
Alta × cwe-266 × Limpiar todo ×
M Alto vulnerabilidad
21/06/2026
[CVE-2026-12778] A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affect…
A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in the library ampa10.sys of the component Kernel Driver. Such manipulation leads to improper access controls. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
21/06/2026
[CVE-2026-12779] A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unkno…
A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unknown processing in the library ddmdrv.sys of the component Kernel Driver. Performing a manipulation results in improper access controls. The attack must be initiated from a local position. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did …
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
21/06/2026
[CVE-2026-12780] A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in th…
A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.sys of the component Kernel Driver. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any …
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2026-12529] A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Pr…
A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. Affected is an unknown function of the file /index.php of the component Student Self-Registration Endpoint. The manipulation leads to improper access controls. Remote exploitation of the attack is possible.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2026-54805] Subscriber Privilege Escalation in Falang multilanguage <= 1.4.2 versions.
Subscriber Privilege Escalation in Falang multilanguage
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2026-39546] Subscriber Privilege Escalation in MultiLoca <= 4.2.15 versions.
Subscriber Privilege Escalation in MultiLoca
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69138] Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.
Subscriber Privilege Escalation in Genemy
nvdaltovulnerabilidad CVSS 8.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
17/06/2026
[CVE-2025-59563] Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions.
Subscriber Privilege Escalation in Sonaar
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12289] Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 1…
Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-49780] Customer Privilege Escalation in Dokan <= 5.0.2 versions.
Customer Privilege Escalation in Dokan
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-49083] Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.
Contributor Privilege Escalation in LatePoint
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-49063] Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions.
Unauthenticated Privilege Escalation in Listdom
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-48889] Subscriber Privilege Escalation in Amelia <= 2.3 versions.
Subscriber Privilege Escalation in Amelia
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-39579] Contributor Privilege Escalation in B Blocks <= 2.0.31 versions.
Contributor Privilege Escalation in B Blocks
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-39587] Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions.
Unauthenticated Privilege Escalation in WP BASE Booking
nvdaltovulnerabilidad CVSS 8.1 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
15/06/2026
[CVE-2026-39470] Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions.
Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions.
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-27407] Editor Privilege Escalation in AI Engine <= 3.4.9 versions.
Editor Privilege Escalation in AI Engine
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-49111] Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalati…
Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation. This issue affects Masteriyo - LMS: from n/a through 2.2.0.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-12217] A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown f…
A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of the component Signed Kernel Driver. The manipulation leads to improper privilege management. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respon…
nvdaltovulnerabilidad CVSS 7.8 NVD
T Alto vulnerabilidad
12/06/2026
[CVE-2026-45830] A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows …
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to.
nvdaltovulnerabilidad CVSS 8.8 NVD