Alertas de Seguridad de la Información

M Alto vulnerabilidad

25/06/2026

[CVE-2026-55412] ToolJet is the open-source foundation am AI-native platform for building and deploying internal tool…

ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source component. The RestAPI data source executes HTTP requests server-side, and its private IP filter only checks the hostname string — not the resolved IP. DNS names like 169.254.169.254.nip.io resolve to the A…

nvdaltovulnerabilidad CVSS 8.3 NVD

A Alto vulnerabilidad

25/06/2026

[CVE-2026-55092] Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.…

Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a crafted annotation that resolves to a path outside the intended destination, causing Trivy to write the l…

nvdaltovulnerabilidad CVSS 7.5 NVD

L Alto vulnerabilidad

25/06/2026

[CVE-2026-54030] LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5, LibreCha…

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5, LibreChat's MCP OAuth implementation does not validate that the resource parameter from OAuth Protected Resource metadata (RFC 9728) matches the configured MCP server URL, allowing a malicious MCP server to steal access tokens intended for a legitimate server. This vulnerability is fixed in 0.8.5.

nvdaltovulnerabilidad CVSS 8.0 NVD

L Alto vulnerabilidad

25/06/2026

[CVE-2026-54033] LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, Libr…

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, LibreChat allows users to configure custom OpenAI-compatible API endpoints by setting a baseURL. This URL is used to construct HTTP requests without any SSRF validation — no private IP check, no scheme restriction, no DNS pinning. An authenticated user can set baseURL to internal network addresses. This…

nvdaltovulnerabilidad CVSS 7.7 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-45233] HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authentic…

HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to relocate arbitrary files by supplying directory traversal sequences in the oldfile parameter at the admin autosave endpoint. Attackers can pass unsanitized traversal sequences directly to file_exists() and rename() functions in admin.php without canonicalization or directory bounda…

nvdaltovulnerabilidad CVSS 8.1 NVD

Z Alto vulnerabilidad

25/06/2026

[CVE-2026-13351] Zephyr's IPv6 network stack can be prevented from receiving or processing future incoming packets by…

Zephyr's IPv6 network stack can be prevented from receiving or processing future incoming packets by sending a small number of maliciously fragmented IPv6 packets. When such a packet is handled by the fragment-header processing path, the associated RX network packet buffer (allocated from a memory slab) is not released back to the pool. Repeating the malicious packet exhausts all RX buffer slots, …

nvdaltovulnerabilidad CVSS 7.5 NVD

S Alto vulnerabilidad

25/06/2026

[CVE-2026-9716] CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition…

CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device’s HMI and configuration functionality unavailable when malformed requests are received over exposed network interfaces.

nvdaltovulnerabilidad CVSS 7.5 NVD

S Alto vulnerabilidad

25/06/2026

[CVE-2026-9717] CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabili…

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a privileged authenticated user interacts with a vulnerable network-exposed service.

nvdaltovulnerabilidad CVSS 7.2 NVD

S Alto vulnerabilidad

25/06/2026

[CVE-2026-9650] CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and …

CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credentials stored within firmware or system files. With this credential an attacker could subsequently compromise the device if they have physical access to the device.

nvdaltovulnerabilidad CVSS 7.5 NVD

V Alto vulnerabilidad

25/06/2026

[CVE-2026-57455] Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_…

Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word through a spell file's SOFO (sound-folding) byte map into a caller-owned result buffer. Its copy loop advances the output index ri with no upper bound and terminates only on the input NUL, writing one byte per input byte into the MAXWLEN-element stac…

nvdaltovulnerabilidad CVSS 7.8 NVD

V Alto vulnerabilidad

25/06/2026

[CVE-2026-57456] Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (ru…

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple…

nvdaltovulnerabilidad CVSS 7.8 NVD

V Alto vulnerabilidad

25/06/2026

[CVE-2026-55895] Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulne…

Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when deleting a local file from the browser. A filename derived from the buffer's directory listing is interpolated into an Ex command line passed to :execute with only the backslash characte…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-55477] 3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated admini…

3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code execution and persistent access as the user running Xray (including root when Xray is running as root). …

nvdaltovulnerabilidad CVSS 7.2 NVD

V Alto vulnerabilidad

25/06/2026

[CVE-2026-55693] Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function …

Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-12844] List::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise functi…

List::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise function. pairwise() collects the values returned by the block into a heap buffer sized to the longer input array, then grows the buffer before each copy with a single quadrupling (alloc

nvdaltovulnerabilidad CVSS 7.5 NVD

N Alto vulnerabilidad

25/06/2026

[CVE-2026-57435] Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, …

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby native extension could leave a Ruby wrapper pointing to freed memory when replacing the value of an XML attribute. If Ruby code had already accessed an attribute child node, Nokogiri::XML::Attr#value= could free the underlying native child node while the wrapper remained reachable t…

nvdaltovulnerabilidad CVSS 7.5 NVD

N Alto vulnerabilidad

25/06/2026

[CVE-2026-57235] Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, …

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::NodeSet#[] (and its alias #slice) checked the requested index against the node set's bounds using a 32-bit-truncated copy of the index. A large negative index could pass the check and then be used at full width, reading outside the node set's storage. On CRuby this is an out-of-bounds…

nvdaltovulnerabilidad CVSS 8.2 NVD

N Alto vulnerabilidad

25/06/2026

[CVE-2026-57236] Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, …

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, calling Document#encoding= with an invalid encoding (e.g., a non-string, or a string containing a null byte) raises an exception, but only after freeing the document's current encoding string without replacing it. The document is left referencing freed memory, so the next call to Document#encoding r…

nvdaltovulnerabilidad CVSS 8.2 NVD

N Alto vulnerabilidad

25/06/2026

[CVE-2026-57434] Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, …

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node. This caused a NULL pointer dereference that could crash the process. This vulnerability is fixed in 1.19.4.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-46735] Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutraliz…

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.

nvdaltovulnerabilidad CVSS 7.8 NVD