Alertas de Seguridad de la Información

A Crítico vulnerabilidad

08/06/2026

[CVE-2026-29167] Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration Thi…

Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

08/06/2026

[CVE-2026-11499] A vulnerability was determined in Tenda HG7HG9 and HG10 300001138_en_xpon. This affects the function…

A vulnerability was determined in Tenda HG7HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may be performed from remote.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

08/06/2026

[CVE-2023-54352] WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attack…

WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme directory. Attackers can access the uploaded PHP shell at /wp-content/themes/seotheme/mar.php to execute system commands and upload additional files for persistent access.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

08/06/2026

[CVE-2024-58348] WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that a…

WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that allows unauthenticated attackers to upload arbitrary files by accessing the ups.php endpoint. Attackers can upload PHP files through the file upload form in the plugin directory to execute arbitrary code on the server.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

08/06/2026

[CVE-2024-58349] WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauth…

WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality. Attackers can upload arbitrary files to the theme directory and execute them to achieve remote code execution on the affected WordPress installation.

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico amenaza

07/06/2026

Alerta ThreatFox: Agentemis,BEACON,CobaltStrike,cobeacon activo — 958 IOCs (07 de June de 2026)

ThreatFox (abuse.ch) detectó 958 IOCs de Agentemis,BEACON,CobaltStrike,cobeacon (Post-Exploitation Framework) en las últimas 24h. Tipos: 451 IP de Comando y Control (C2), 507 Dominio malicioso. Nivel: CRITICO.

threat-intelthreatfoxioc Editorial

A Crítico amenaza

07/06/2026

Alerta ThreatFox: RemcosRAT,Remvio,Socmer activo — 187 IOCs (07 de June de 2026)

ThreatFox (abuse.ch) detectó 187 IOCs de RemcosRAT,Remvio,Socmer (RAT (Troyano de Acceso Remoto)) en las últimas 24h. Tipos: 180 IP de Comando y Control (C2), 7 Dominio malicioso. Nivel: CRITICO.

threat-intelthreatfoxioc Editorial

B Crítico vulnerabilidad

05/06/2026

[CVE-2026-45779] OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerabil…

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open XDMoD versions prior to 10.0.3 that allows an unauthenticated remote attacker to execute arbitrary SQL statements. Exploitation requires no authentication or user interaction and can result in complete compromise of the underlying database. All deployments of Open XDMoD prior to 1…

nvdcriticovulnerabilidad CVSS 9.8 NVD

G Crítico vulnerabilidad

05/06/2026

[CVE-2026-45758] Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximate…

Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of `guardrails-ai` (0.10.1) to PyPI. Aany user who installed `guardrails-ai==0.10.1` from PyPI on May 11, 2026 may be affected. Security researchers identified the malicious package within approximately 2 hours of publication, and PyPI qu…

nvdcriticovulnerabilidad CVSS 9.6 NVD

B Crítico vulnerabilidad

05/06/2026

[CVE-2026-45777] OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 a…

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remotely execute arbitrary system commands on the web server hosting Open XDMoD with the privileges of the web server process. This could allow an attacker to read or modify application data, alter system configuration, or disrupt service availability. All…

nvdcriticovulnerabilidad CVSS 9.8 NVD

T Crítico vulnerabilidad

05/06/2026

[CVE-2026-45750] Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa…

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath endpoint in the Termix File Manager component unsafely processes the path parameter and embeds it into a shell command executed over the active SSH session. Because the user-controlled value is placed inside double quotes an…

nvdcriticovulnerabilidad CVSS 9.0 NVD

T Crítico vulnerabilidad

05/06/2026

[CVE-2026-45748] Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa…

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST /ssh/tunnel/connect` endpoint in Termix prior to version 2.3.2 builds an SSH tunnel command by interpolating user-controlled host record fields (`endpointIP`, `endpointUsername`, `password`) directly into a shell command without escaping, allowing persistent OS command injection …

nvdcriticovulnerabilidad CVSS 9.8 NVD

T Crítico vulnerabilidad

05/06/2026

[CVE-2026-45746] Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa…

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the File Manager functionality in Termix contains a critical Broken Access Control vulnerability due to improper validation of the sessionId parameter. The backend trusts a client-controlled identifier without verifying that it belongs to the authenticated user. Thi…

nvdcriticovulnerabilidad CVSS 9.0 NVD

T Crítico vulnerabilidad

05/06/2026

[CVE-2026-45744] Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa…

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath endpoint in Termix is vulnerable to OS command injection. The endpoint uses double-quote escaping for shell command construction, which does not prevent $(...) and backtick command substitution. Any authenticated user with a…

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad

05/06/2026

[CVE-2026-36500] An issue in the cluster-admin:backup-datastore component of Controller v12.0.5 allows attackers to e…

An issue in the cluster-admin:backup-datastore component of Controller v12.0.5 allows attackers to execute a directory traversal via a crafted request.

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

05/06/2026

[CVE-2025-71317] NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants…

NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint (for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax parameter validation can be shortened to /cgi-bin/login.cgi?username=eurek%20eurek) to obtain administrat…

nvdcriticovulnerabilidad CVSS 9.8 NVD

B Crítico vulnerabilidad

05/06/2026

[CVE-2026-9270] DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does …

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The send_stats method does not remove newlines from metric names ($stat variable), allowing attackers to change the metric name prefix. The send_stats method does not validate the content of the value ($delta v…

nvdcriticovulnerabilidad CVSS 9.1 NVD

P Crítico vulnerabilidad

05/06/2026

[CVE-2026-10879] DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more tha…

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders 10-99 require four characters, 100-999 require five characters, et cetera.

nvdcriticovulnerabilidad CVSS 9.8 NVD

? Crítico alerta

05/06/2026

CISA registra nueva vulnerabilidad explotada activamente (CVE-2026-28318)

La Agencia de Ciberseguridad e Infraestructura Crítica de EE.UU. (CISA) ha añadido a su catálogo de vulnerabilidades conocidas y explotadas activamente la CVE-2026-28318, indicando que esta brecha ya está siendo aprovechada por atacantes en entornos reales. Aunque no se especifica el producto afectado en el advisory, su inclusión en el catálogo implica riesgo inmediato para infraestructura crítica en México y Latinoamérica. Las organizaciones deben priorizar esta vulnerabilidad en sus ciclos de parchado.

cisaus-certalerta CISA KEV

M Crítico vulnerabilidad

05/06/2026

[CVE-2026-7762] A heap-based buffer overflow vulnerability in the dot11ah.ko HaLow Wi-Fi kernel driver in Morse Micr…

A heap-based buffer overflow vulnerability in the dot11ah.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.13 allows an unauthenticated attacker within radio range to cause a Denial of Service (kernel panic) or potentially achieve Remote Code Execution via a crafted 802.11ah beacon or probe response frame containing a malformed S1G Capabilities Information El…

nvdcriticovulnerabilidad CVSS 9.8 NVD