Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,446
Total alertas
4765
Críticas
17048
Altas
8
Ransomware
1257
Esta semana
RSS
Crítica × Limpiar todo ×
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-73533] Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered …
Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file (app/Library/updater/NinjaTableDataSync.php) that established a backdoor REST API endpoint, dropped persistent PHP files in mu-plugins and uploads directories, installed a passwordless administ…
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-53791] rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated …
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a spoofed source IP in the PROXY protocol header to circumvent hosts allow/deny rules, gaining unauthorized a…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-66691] Unauthenticated Broken Access Control in Nokri <= 1.6.6 versions.
Unauthenticated Broken Access Control in Nokri
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-66472] Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.
Unauthenticated SQL Injection in Everest Backup
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-66478] Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.
Unauthenticated SQL Injection in Church Admin
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-66465] Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions.
Unauthenticated Broken Authentication in Cartify
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-66453] Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.
Unauthenticated Broken Authentication in Salon booking system
nvdcriticovulnerabilidad CVSS 9.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-66458] Unauthenticated SQL Injection in RealPress <= 1.1.2 versions.
Unauthenticated SQL Injection in RealPress
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-66436] Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.
Unauthenticated SQL Injection in Active Products Tables for WooCommerce
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-66446] Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions.
Subscriber SQL Injection in If-So Dynamic Content Personalization
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-66424] Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.
Unauthenticated Privilege Escalation in SMS Alert Order Notifications
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-61969] Unauthenticated SQL Injection in Listdom <= 5.6.0 versions.
Unauthenticated SQL Injection in Listdom
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-61962] Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.
Unauthenticated Arbitrary Code Execution in WP BASE Booking
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-61966] Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.
Subscriber SQL Injection in WPJAM Basic
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-61967] Unauthenticated Privilege Escalation in miniorange otp verification <= 5.5.1 versions.
Unauthenticated Privilege Escalation in miniorange otp verification
nvdcriticovulnerabilidad CVSS 9.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-28185] Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions.
Unauthenticated Broken Authentication in Log in with Google
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-28149] Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
Unauthenticated PHP Object Injection in Headless Single Sign On
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-28001] Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.
Unauthenticated SQL Injection in WP Directory Kit
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-28008] Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions…
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client)
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
13/08/2026
[CVE-2026-28142] Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions.
Unauthenticated SQL Injection in Web Directory Free
nvdcriticovulnerabilidad CVSS 9.3 NVD