Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,949
Total alertas
3186
Críticas
10491
Altas
8
Ransomware
1233
Esta semana
RSS
Crítica × nvd × Limpiar todo ×
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-60173] Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Securit…
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 …
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-60168] Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (c…
Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorize…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-47731] The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS…
The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS)) is a Python-based software suite developed to handle Ground Data System (GDS), Electronic Ground Support Equipment (EGSE), commanding, telemetry uplink/downlink, and sequencing for instrument and CubeSat Missions. In versions prior to 2.6.1 and in version 3.1.0, the Binary Stream Capture (BSC) co…
nvdcriticovulnerabilidad CVSS 9.1 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-47056] Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Ser…
Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Data Integrator. While the vulnerability is in Oracle Data Integrator, attacks may significantly impact add…
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-47036] Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval…
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Bas…
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-47040] Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions th…
Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or comp…
nvdcriticovulnerabilidad CVSS 9.1 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-46989] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base Platfo…
nvdcriticovulnerabilidad CVSS 9.1 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-46994] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover …
nvdcriticovulnerabilidad CVSS 9.8 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-46982] Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component:…
Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 14.1.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Integration Bus. Successful attacks of this vulnerability can result in takeover of Oracle Retail Integration…
nvdcriticovulnerabilidad CVSS 9.8 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-46983] Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component:…
Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 16.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Integration Bus. Successful attacks of this vulnerability can result in takeover of Oracle Retail Integration B…
nvdcriticovulnerabilidad CVSS 9.8 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-46924] Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.…
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity …
nvdcriticovulnerabilidad CVSS 9.8 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-35290] Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.…
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity …
nvdcriticovulnerabilidad CVSS 9.8 NVD
O Crítico vulnerabilidad
21/07/2026
[CVE-2026-46876] Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.…
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 9.8 (Confidentiality, Int…
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-65057] Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticat…
Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the unprotected healthcheck endpoint. Attackers can send a crafted JSON payload with a malicious host parameter to cause the backend to issue outbound requests to internal services or cloud…
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-52469] SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via t…
SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the DeviceInfoMapper.xml file
nvdcriticovulnerabilidad CVSS 9.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-52470] SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via t…
SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the RecordStateMapper.xml file
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-52472] SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the…
SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-30631] An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11…
An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers to execute arbitrary code via crafted path to `computer_write_file`.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-64878] Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument …
Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privileged OS user via the Analysis REST endpoint.
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-64879] A filename supplied during file upload is not properly sanitized before being used in system command…
A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality.
nvdcriticovulnerabilidad CVSS 9.9 NVD