Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Ui" — 443 resultados ✕ Limpiar búsqueda
13,599
Total alertas
3086
Críticas
10241
Altas
8
Ransomware
1805
Esta semana
RSS
Crítica × Limpiar todo ×
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-18051] The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request path it use…
The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request path it uses to build cache file names, allowing unauthenticated attackers to write a file into any existing directory on the server, inside or outside the web root, overwriting whatever occupies the target name. On Apache, the same flaw overwrites the site's .htaccess files, which breaks the site and can stri…
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Crítico vulnerabilidad
Hace 6 días
Vulnerabilidad crítica de desbordamiento de búfer en UTT HiPER 1200GW hasta versión 2.5.3-170306
Se ha identificado una debilidad en los equipos UTT HiPER 1200GW (versiones hasta 2.5.3-170306) que permite un desbordamiento de búfer basado en pila mediante manipulación remota del parámetro 'timestart' en la función strcpy del archivo /goform/formGroupConfig. Con puntuación CVSS 9.9, este dispositivo ampliamente utilizado en redes corporativas de LATAM como gateway de seguridad es vulnerable a ejecución remota de código. El exploit está disponible públicamente, elevando significativamente el riesgo de compromiso.
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Crítico vulnerabilidad
Hace 6 días
Vulnerabilidad crítica en UTT HiPER 1250GW permite ejecución remota de código (CVE-2026-76004)
Se ha identificado una vulnerabilidad de desbordamiento de búfer en la pila (stack-based buffer overflow) en UTT HiPER 1250GW versiones hasta 3.2.7-210907-180535. El fallo existe en el manejador HTTP del formulario /goform/aspApBasicConfigUrcp y puede ser explotado remotialmente sin autenticación manipulando el parámetro pvid. El exploit está públicamente disponible, poniendo en riesgo crítico los equipos desplegados en infraestructuras de ISPs, centros de datos y operadores de telecomunicaciones en América Latina.
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-71036] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of t…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-71037] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks requ…
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-71026] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful a…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-71014] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful a…
nvdcriticovulnerabilidad CVSS 9.1 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-71015] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful a…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-70994] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful a…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-70995] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful a…
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-70997] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of t…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-70998] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vu…
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-70984] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful atta…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-70976] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful atta…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-70977] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful atta…
nvdcriticovulnerabilidad CVSS 9.1 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-70978] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful atta…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-70979] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful atta…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-70980] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vul…
nvdcriticovulnerabilidad CVSS 9.0 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-70981] Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful atta…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
Hace 6 días
[CVE-2026-70958] Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component…
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks require human interaction from a pe…
nvdcriticovulnerabilidad CVSS 9.6 NVD