Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,509
Total alertas
3066
Críticas
10171
Altas
8
Ransomware
1815
Esta semana
RSS
Crítica × Este mes × Limpiar todo ×
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-19170] Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacke…
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-19149] Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker t…
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-18367] A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos…
A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6.
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-17032] Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised…
Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and other sensitive data and grants full control of affected sites.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-14812] The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a h…
The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, also enables remote code execution, server-side request forgery and arbitrary front-end script/content injection, giving an unauthenticated attacker full control of the affected site.
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-11976] The official MonsterInsights Pro update distribution bucket (`monster-insights.s3.amazonaws.com`) wa…
The official MonsterInsights Pro update distribution bucket (`monster-insights.s3.amazonaws.com`) was compromised. Both the current release (10.2.2) and the version MonsterInsights rolled back to (10.2.0) contain a malicious file, `class-system-check.php`. Three distinct variants were observed on 2026-06-11, all sharing the same AES-256-GCM key, confirming a single threat actor. The attacker retai…
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2025-14561] In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isolation correctly. Thi…
In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isolation correctly. This allows a user in one tenant, possessing sufficient privileges to invoke these APIs, to perform operations that impact other tenants. The vulnerability allows a privileged user to perform publisher operations such as exposing or modifying API Metadata in another tenant environment. This impact is …
nvdcriticovulnerabilidad CVSS 9.0 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-67261] Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a…
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying operating system with root privileges. Exploitation may lead to a complete sys…
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-66709] Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions.
Shop manager Remote Code Execution (RCE) in CTX Feed
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-66665] Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.
Unauthenticated Arbitrary File Upload in Type Hub
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-66447] Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.
Unauthenticated SQL Injection in WordPress File Upload
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-66662] Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.
Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-65575] Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.
Unauthenticated PHP Object Injection in Accalia
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-65576] Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions.
Unauthenticated PHP Object Injection in Adrena
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-65577] Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.
Unauthenticated PHP Object Injection in Advice
nvdcriticovulnerabilidad CVSS 9.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-65578] Unauthenticated PHP Object Injection in Agora <= 1.9 versions.
Unauthenticated PHP Object Injection in Agora
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-65579] Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.
Unauthenticated PHP Object Injection in Agricola
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-65581] Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.
Unauthenticated PHP Object Injection in AI ANN
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-65571] Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.
Unauthenticated PHP Object Injection in 69 Clothing
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
06/08/2026
[CVE-2026-65572] Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions.
Unauthenticated PHP Object Injection in A.Williams
nvdcriticovulnerabilidad CVSS 9.8 NVD