Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,419
Total alertas
4761
Críticas
17027
Altas
8
Ransomware
1260
Esta semana
RSS
T Alto vulnerabilidad
17/06/2026
[CVE-2026-11409] An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler i…
An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.
nvdaltovulnerabilidad CVSS 7.2 NVD
T Alto vulnerabilidad
17/06/2026
[CVE-2026-11410] An authenticated OS command injection vulnerability exists in the BigPond Cable (BPA) WAN configurat…
An authenticated OS command injection vulnerability exists in the BigPond Cable (BPA) WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.
nvdaltovulnerabilidad CVSS 7.2 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0068] In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC…
In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed device without DO consent due to desync from persistence. This could lead to local escalation of privilege if a user can install a malicious app with no additional execution privileges needed. User interaction is needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0071] In SettingsLib, there is a possible missing permission check due to a logic error in the code. This …
In SettingsLib, there is a possible missing permission check due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0081] In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could …
In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0082] In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permissi…
In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0083] In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This c…
In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.0 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69176] Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.
Unauthenticated Local File Inclusion in ITactics
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69177] Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions.
Unauthenticated Local File Inclusion in Roneous
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69178] Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions.
Unauthenticated Local File Inclusion in Truemag
nvdaltovulnerabilidad CVSS 8.1 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0019] In SettingsLib, there is a possible way to disable system components due to a logic error in the cod…
In SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0063] In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier rest…
In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69163] Unauthenticated Local File Inclusion in WineShop <= 3.17 versions.
Unauthenticated Local File Inclusion in WineShop
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69165] Unauthenticated Local File Inclusion in Choreo <= 1.6 versions.
Unauthenticated Local File Inclusion in Choreo
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69167] Unauthenticated Local File Inclusion in Eros <= 1.3 versions.
Unauthenticated Local File Inclusion in Eros
nvdaltovulnerabilidad CVSS 8.1 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69168] Unauthenticated Local File Inclusion in Spike <= 1.2 versions.
Unauthenticated Local File Inclusion in Spike
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69171] Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.
Unauthenticated Local File Inclusion in Orpheus
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69172] Unauthenticated Local File Inclusion in Resurs <= 1.3 versions.
Unauthenticated Local File Inclusion in Resurs
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69173] Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions.
Unauthenticated Local File Inclusion in Tipsy
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69151] Unauthenticated Cross Site Scripting (XSS) in Grand Car Rental <= 3.7 versions.
Unauthenticated Cross Site Scripting (XSS) in Grand Car Rental
nvdaltovulnerabilidad CVSS 7.1 NVD