Alertas de Seguridad de la Información

P Crítico vulnerabilidad Nuevo

Hace 8 horas

[CVE-2026-109618] PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of …

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and le…

nvdcriticovulnerabilidad CVSS 9.8 NVD

P Crítico vulnerabilidad Nuevo

Hace 8 horas

[CVE-2026-109619] PHP has various global state that temporarily points into request memory. In some scenarios, global …

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and pro…

nvdcriticovulnerabilidad CVSS 9.8 NVD

? Crítico alerta Nuevo

Hace 17 horas

Critical Vulnerabilities in PHP Require Immediate Patching

CISA emite alerta de seguridad: Critical Vulnerabilities in PHP Require Immediate Patching. CVEs relacionados: CVE-2026-109618, CVE-2026-109619.

cisaus-certalerta CISA KEV

M Crítico vulnerabilidad

Hace 2 días

[CVE-2026-107083] SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injectio…

SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_detail.php via the parameter fileID.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

Hace 4 días

[CVE-2026-111911] phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registrat…

phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach credentials to any account without authentication or challenge validation. Attackers can stage a victim username, submit a forged fmt=none attestation to register a passkey, then log in bypassing passwords and TOTP for account takeover.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

Hace 4 días

Inyección de Objetos PHP en plugin LearnPress para WordPress hasta versión 4.4.10

El plugin LearnPress (versiones ≤4.4.10) permite inyección de objetos PHP mediante deserialización de entrada no confiable en el parámetro 'checkout-email' durante acciones AJAX de pago. Un atacante puede ejecutar código arbitrario en servidores WordPress utilizados en plataformas educativas y tiendas online en LATAM. La vulnerabilidad persiste porque sanitize_text_field() no elimina la sintaxis de objetos serializados, permitiendo almacenamiento malicioso en tablas de sesión de LearnPress.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

Hace 5 días

[CVE-2026-104730] The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPre…

The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no i…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

Hace 6 días

[CVE-2026-47168] EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authentic…

EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated administrator can supply crafted serialized PHP object data that is stored in background MassAction or Export parameters and later deserialized by the application. The deserialization paths do not restrict allowed classes, allowing attacker-controlled object instantiation and arbitrary code exe…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

14/10/2026

[CVE-2026-55680] WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to…

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastro_cobranca.php can place a quoted SQL expression in the codigo parameter, which extract($_REQUEST) passes into the WHERE codigo= clause of an UPDATE statement without validation or parameter binding. Quoting the value bypasses MariaDB type conversion for the VARCHAR co…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

14/10/2026

[CVE-2026-55683] WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/soc…

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoint accepts POST input through extract($_REQUEST) and directly incorporates valor, valor_pago, id_pessoa, id_socio, and id_sociotipo into UPDATE, INSERT, and SELECT statements without prepared statements. A remote attacker can use the affected parameters to exec…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

14/10/2026

[CVE-2026-55684] WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/soc…

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint accepts form-encoded POST data through extract($_REQUEST) and interpolates codigo, descricao, data_emissao, data_vencimento, data_pagamento, valor, valor_pago, status, link_cobranca, link_boleto, linha_digitavel, and id_socio into a raw INSERT state…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

14/10/2026

[CVE-2026-55573] e107 is a content management system (CMS). Prior to 2.3.7, install.php decodes the attacker-controll…

e107 is a content management system (CMS). Prior to 2.3.7, install.php decodes the attacker-controlled previous_steps POST parameter and passes it to unserialize() at file scope and again in the e_install constructor without restricting allowed classes. The installer remains accessible after a normal installation, and a crafted object graph using the bundled GuzzleHttp\Psr7\PumpStream class can fl…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

14/10/2026

[CVE-2026-55572] e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and…

e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107_plugins/alt_auth/otherdb_auth.php and e107_plugins/alt_auth/e107db_auth.php. The login() methods execute those strings with PDO::query() before effective sanitization, so an unauthenticated user can in…

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Crítico vulnerabilidad

14/10/2026

[CVE-2026-104800] The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and …

The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter. This is due to missing authentication, capability checks, and nonce verification on the standalone admin.php endpoint, combined with unsanitized injection of POST parameters directly into generated PHP source written to an included fil…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

14/10/2026

[CVE-2026-110002] The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all vers…

The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script, combined with insufficient sanitization of the pluginURL parameter before it is written to a web-executab…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

13/10/2026

[CVE-2026-63146] Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, atta…

Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file during installation through File::updateConfigFile() and DbInstall::dbControl(), combined with an SQL injection issue enabled by PDO::ATTR_EMULATE_PREPARES supporting stacked queries. Attackers can exploit the SQL injectio…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

13/10/2026

[CVE-2026-54454] OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and h…

OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to 0.10.0, the OpenCATS Import module in modules/import/ImportUI.php can preserve an uploaded file's original name for one import data type and place the file in the web-accessible temporary directory. An authenticated user with Import privileges can select the affected import pat…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

13/10/2026

[CVE-2026-55695] FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.…

FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repository URL through admin/updater-handler.php and trigger perform_update, which passes the URL to update.sh. The updater clones the repository and replaces the live plugins/, admin/, and includes/ directories without verifyin…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

11/10/2026

[CVE-2026-104028] The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce ver…

The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

10/10/2026

[CVE-2026-78533] Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.

Unauthenticated PHP Object Injection in Qwery

nvdcriticovulnerabilidad CVSS 9.8 NVD