Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 13 min
Buscando: "Ni" — 5716 resultados ✕ Limpiar búsqueda
22,419
Total alertas
4761
Críticas
17027
Altas
8
Ransomware
1260
Esta semana
RSS
Alta × Limpiar todo ×
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83074] Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C…
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSH to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact…
nvdaltovulnerabilidad CVSS 8.6 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83081] Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applicati…
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Banking Corporate Lending executes to compromise Orac…
nvdaltovulnerabilidad CVSS 8.0 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83071] Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co…
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Machine Learning). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83073] Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C…
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83065] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle WebCenter Portal executes to compromise Oracle WebCenter Portal. Successful…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83048] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact …
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83049] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Securit…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly im…
nvdaltovulnerabilidad CVSS 8.5 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83052] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact…
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83041] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impa…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83045] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact …
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83022] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle WebCenter Enterprise Capture executes to compromis…
nvdaltovulnerabilidad CVSS 7.9 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83026] Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen…
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Identity Manager Connector executes to compromise Oracle Iden…
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83028] Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen…
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Identity Manager Connector executes to compromise Oracle Iden…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83002] Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic…
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly imp…
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-82993] Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi…
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significan…
nvdaltovulnerabilidad CVSS 8.5 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76820] OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.…
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny list or reject private, loopback, and link-local destinations, allowing an authenticated account with the …
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76692] A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacen…
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service (system crash) or the disclosure of uninitialized stack memory.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76693] A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote …
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service against certain services running on impacted Gateways.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76682] A vulnerability in the network security monitoring component of intrusion detection systems could al…
A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on the system.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76684] Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator th…
Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.
nvdaltovulnerabilidad CVSS 8.1 NVD