Alertas de Seguridad de la Información

M Crítico vulnerabilidad

30/06/2026

[CVE-2026-58138] Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerabilit…

Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions to the workflow API endpoint prior to authentication. Attackers can exploit unsandboxed GraalVM evaluators configured with HostAccess.ALL or…

nvdcriticovulnerabilidad CVSS 9.8 NVD

H Crítico vulnerabilidad

30/06/2026

[CVE-2026-58116] LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers wit…

LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. The application passes user-supplied model path input unvalidated into AutoTokenizer.from_pretrained() and AutoModel.from_pretrained() with a hardcoded trust_remote_code=True param…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

29/06/2026

[CVE-2026-37637] An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the fi…

An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component

nvdcriticovulnerabilidad CVSS 9.1 NVD

K Crítico vulnerabilidad

26/06/2026

[CVE-2026-53576] Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authe…

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@Filter("/api/v1/**")) treats any request whose path ends in /configs as the public instance-config endpoint and forwards it without a credential check. kestra addresses its resources by URL path segments that the caller chooses (/api/v1/{tenant}/flows/{namespace},…

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Crítico vulnerabilidad

26/06/2026

[CVE-2026-33646] mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .…

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during parsing, with the exec() function registered, enabling arbitrary command execution. Unlike .mise.toml files, .tool-versions files are not subject to trust verification in non-paranoid mode. This means an attacker can place a malicious .tool…

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Crítico vulnerabilidad

25/06/2026

[CVE-2026-54823] Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions.

Contributor Remote Code Execution (RCE) in Widget Options

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad

24/06/2026

[CVE-2026-55570] SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, it does not escape th…

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, it does not escape the untrusted fields (name, version, author, description) when they are serialized into the data-obj HTML attribute of each marketplace card. Because the attribute is single-quoted and the value is produced with JSON.stringify() (which does not escape ', ), a package whose name contains a singl…

nvdcriticovulnerabilidad CVSS 9.0 NVD

K Crítico vulnerabilidad

23/06/2026

[CVE-2026-53753] Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expres…

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expression() function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object attributes (gi_frame, f_back, f_builtins) do NOT start with underscore, enabling a complete sandbox escape to achieve arbitrary code execution.…

nvdcriticovulnerabilidad CVSS 9.8 NVD

L Crítico vulnerabilidad

23/06/2026

[CVE-2026-48519] Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public Flows" in code) contains a critical RCE vulnerability. Shareable Playground feature works by enabling the execution of workflows by unauthenticated users, by accessing a link. Specifically, it enables the route /api/v1/build_public_tmp to execute any public flow, gi…

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Crítico vulnerabilidad

23/06/2026

[CVE-2026-12866] All versions of the package expr-eval are vulnerable to Code Execution via the toJSFunction() API. A…

All versions of the package expr-eval are vulnerable to Code Execution via the toJSFunction() API. An attacker can execute arbitrary JavaScript by supplying crafted expressions that are compiled into native code using new Function(). Because user-controlled expressions are transformed directly into executable JavaScript, attackers can escape the intended expression sandbox and run arbitrary code w…

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

22/06/2026

[CVE-2026-10789] A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the M…

A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that could allow arbitrary code execution. A successful exploit may allow code to execute with the privileges of the current user.

nvdcriticovulnerabilidad CVSS 9.6 NVD

L Crítico vulnerabilidad

22/06/2026

[CVE-2026-10561] IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python exe…

IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated attacker to execute arbitrary code on the host system, resulting in complete compromise

nvdcriticovulnerabilidad CVSS 10.0 NVD

P Crítico vulnerabilidad

20/06/2026

[CVE-2026-5366] Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-contr…

Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `commit_sha` parameter, which is passed to git commands, lacks validation and does not include a `--` separator to distinguish user input from git flags. This allows attackers to inject arbitrary git flags, such as `--upload-pack`, enabling execu…

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad

20/06/2026

[CVE-2024-58351] Flowise before 2.1.4 allows configuration to be injected into the Chainflow during execution via the…

Flowise before 2.1.4 allows configuration to be injected into the Chainflow during execution via the overrideConfig option, supported in both the frontend web integration and the backend Prediction API. Because this feature is enabled by default with no allow-list of permitted variables and relies on vm2 for sandboxing, an attacker can abuse it to achieve remote code execution and sandbox escape, …

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

20/06/2026

[CVE-2022-50972] WooCommerce 7.1.0 contains a remote code execution vulnerability that allows attackers to execute ar…

WooCommerce 7.1.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary PHP code by injecting shell commands through the product-type parameter. Attackers can send requests to the class-wc-meta-box-product-images.php endpoint with unsanitized product-type values to write malicious PHP files to the web root.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

17/06/2026

[CVE-2026-36418] JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper handling…

JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper handling of Aviator expressions. The /jmreport/executeSelectApi endpoint passes user-supplied input directly to the Aviator expression engine without adequate validation allowing attackers to execute arbitrary code.

nvdcriticovulnerabilidad CVSS 9.1 NVD

F Crítico vulnerabilidad

17/06/2026

[CVE-2026-47103] Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution vulnerability that …

Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary code by supplying malicious SCXML documents containing crafted `` attributes evaluated unsafely. The SCXMLProcessor passes attacker-controlled expression strings through a call chain ending in Python's built-in eval() without sandboxing, enablin…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

17/06/2026

[CVE-2026-40783] Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions.

Contributor Remote Code Execution (RCE) in Blocksy Companion Pro

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad

17/06/2026

[CVE-2026-25470] Improper Control of Generation of Code ('Code Injection') vulnerability in ACPT ACPT (Pro) - Custom …

Improper Control of Generation of Code ('Code Injection') vulnerability in ACPT ACPT (Pro) - Custom Post Types Plugin for WordPress allows Remote Code Inclusion. This issue affects ACPT (Pro) - Custom Post Types Plugin for WordPress: from n/a through 2.0.47.

nvdcriticovulnerabilidad CVSS 10.0 NVD

O Crítico vulnerabilidad

17/06/2026

[CVE-2026-46850] Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). The suppo…

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change). Successful attack…

nvdcriticovulnerabilidad CVSS 9.9 NVD