Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada hace 42 min

22,093

Total alertas

4671

Críticas

16834

Altas

8

Ransomware

1009

Esta semana

RSS

Crítica × cwe-266 × Limpiar todo ×

M Crítico vulnerabilidad

[CVE-2026-73347] Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.

Unauthenticated Privilege Escalation in TrueBooker

M Crítico vulnerabilidad

Vulnerabilidad crítica en plugin Grav API permite escalación de privilegios

El plugin getgrav/grav-plugin-api anterior a la versión 1.0.13 no valida correctamente que los permisos de nuevas claves API sean un subconjunto de los permisos del solicitante. Un atacante con una clave API de bajo privilegio puede crear claves con permisos elevados, comprometiendo aplicaciones Grav alojadas en México y Latinoamérica. Esta vulnerabilidad afecta directamente portales de contenido, sistemas de gestión documental y plataformas educativas que utilizan este plugin.

M Crítico vulnerabilidad

[CVE-2026-72839] filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is ena…

filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register accounts that inherit the server root scope with full create, modify, delete, rename, share, and download permissions, allowing unrestricted access to all files.

M Crítico vulnerabilidad

[CVE-2026-66424] Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.

Unauthenticated Privilege Escalation in SMS Alert Order Notifications

M Crítico vulnerabilidad

[CVE-2026-66662] Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps

M Crítico vulnerabilidad

[CVE-2026-65507] Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.

Unauthenticated Privilege Escalation in AIWU

M Crítico vulnerabilidad

[CVE-2026-10059] A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant admin…

A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by creating a namespaced ClusterCurator. This action inadvertently grants the tenant administrator the ability to mint a token for a ServiceAccount with cluster-wide administrative authority. This leads to a privilege escalatio…

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Crítico vulnerabilidad

[CVE-2026-61951] Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions.

Unauthenticated Privilege Escalation in TrueBooker

M Crítico vulnerabilidad

[CVE-2026-59540] Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions.

Unauthenticated Privilege Escalation in SMS Alert Order Notifications

M Crítico vulnerabilidad

[CVE-2026-57813] Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege …

Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through

M Crítico vulnerabilidad

[CVE-2026-57692] Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. T…

Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects PrivateContent: from n/a through 9.9.2.

M Crítico vulnerabilidad

[CVE-2026-56033] Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions.

Unauthenticated Privilege Escalation in Dokan Pro

M Crítico vulnerabilidad

[CVE-2026-56028] Unauthenticated Privilege Escalation in Easy Elements for Elementor – Addons & Website Tem…

Unauthenticated Privilege Escalation in Easy Elements for Elementor – Addons & Website Templates

M Crítico vulnerabilidad

[CVE-2026-56030] Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions.

Unauthenticated Privilege Escalation in Paytium

M Crítico vulnerabilidad

[CVE-2026-54807] Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions.

Unauthenticated Privilege Escalation in Registration Form for WooCommerce

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

M Crítico vulnerabilidad

[CVE-2026-49058] Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.

Unauthenticated Privilege Escalation in LoginPress Pro

M Crítico vulnerabilidad

[CVE-2026-27395] Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.

Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.

M Crítico vulnerabilidad

[CVE-2025-69179] Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.

Unauthenticated Privilege Escalation in Support Ticket Management System

M Crítico vulnerabilidad

[CVE-2026-12294] Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox E…

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

M Crítico vulnerabilidad

[CVE-2026-39583] Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions.

Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery

← Anterior 1 2 3 Siguiente →