Alertas de Seguridad de la Información

M Medio vulnerabilidad

14/07/2026

CVE-2026-33842 Windows File Explorer Information Disclosure Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-33842 Windows File Explorer Information Disclosure Vulnerability. Tipo: Divulgación de Información.

windowsinfo-disclosure Microsoft MSRC

M Medio vulnerabilidad

14/07/2026

CVE-2026-34328 Windows Audio Service Information Disclosure Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-34328 Windows Audio Service Information Disclosure Vulnerability. Tipo: Divulgación de Información.

windowsinfo-disclosure Microsoft MSRC

M Medio vulnerabilidad

14/07/2026

CVE-2026-40422 Windows File Explorer Information Disclosure Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-40422 Windows File Explorer Information Disclosure Vulnerability. Tipo: Divulgación de Información.

windowsinfo-disclosure Microsoft MSRC

M Medio vulnerabilidad

14/07/2026

CVE-2026-41087 Windows File Explorer Information Disclosure Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-41087 Windows File Explorer Information Disclosure Vulnerability. Tipo: Divulgación de Información.

windowsinfo-disclosure Microsoft MSRC

M Medio vulnerabilidad

14/07/2026

CVE-2026-34348 Windows Event Logging Service Information Disclosure Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-34348 Windows Event Logging Service Information Disclosure Vulnerability. Tipo: Divulgación de Información.

windowsinfo-disclosure Microsoft MSRC

M Medio vulnerabilidad

14/07/2026

CVE-2026-44806 Windows Secure Channel Denial of Service Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-44806 Windows Secure Channel Denial of Service Vulnerability. Tipo: Denegación de Servicio (DoS).

windowsdos Microsoft MSRC

F Medio vulnerabilidad

14/07/2026

Buffer overread in authd and wad daemon

Fortinet PSIRT publica advisory de seguridad: Buffer overread in authd and wad daemon. Tipo: Vulnerabilidad de seguridad. Producto afectado: Fortios.

firewallfortios PAN PSIRT

F Medio vulnerabilidad

14/07/2026

Cross-Site Scripting in Domain parameter

Fortinet PSIRT publica advisory de seguridad: Cross-Site Scripting in Domain parameter. Tipo: Cross-Site Scripting (XSS). Producto afectado: Fortisiem.

firewall PAN PSIRT

F Medio vulnerabilidad

14/07/2026

Header injection in Web Filter warning page

Fortinet PSIRT publica advisory de seguridad: Header injection in Web Filter warning page. Tipo: Vulnerabilidad de seguridad. Producto afectado: Fortios.

firewallfortios PAN PSIRT

F Medio vulnerabilidad

14/07/2026

SSL-VPN Reflected XSS

Fortinet PSIRT publica advisory de seguridad: SSL-VPN Reflected XSS. Tipo: Cross-Site Scripting (XSS). Producto afectado: Fortios.

firewallfortios PAN PSIRT

F Medio vulnerabilidad

14/07/2026

Supers override fails to properly override supervisor address

Fortinet PSIRT publica advisory de seguridad: Supers override fails to properly override supervisor address. Tipo: Vulnerabilidad de seguridad. Producto afectado: Fortisiem.

firewall PAN PSIRT

C Medio vulnerabilidad

13/07/2026

[CVE-2026-15531] A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b…

A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b2473e3706. Affected by this issue is the function torch.load of the file run_nerf.py of the component Checkpoint File Handler. The manipulation of the argument ckpt_path leads to deserialization. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Th…

check-pointcheckpointmedio CVSS 5.3 NVD

P Medio vulnerabilidad

08/07/2026

CVE-2026-0277 Prisma Access Agent: Improper Certificate Validation on iOS

Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0277 Prisma Access Agent: Improper Certificate Validation on iOS (Severity: MEDIUM). Tipo: Vulnerabilidad de seguridad. Producto afectado: Prisma Access.

firewallngfwprisma-access PAN PSIRT

P Medio vulnerabilidad

08/07/2026

CVE-2026-0282 PAN-OS: File Deletion Vulnerability in Management Web Interface

Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0282 PAN-OS: File Deletion Vulnerability in Management Web Interface (Severity: LOW). Tipo: Vulnerabilidad de seguridad. Producto afectado: PAN-OS.

firewallngfwpan-os PAN PSIRT

P Medio vulnerabilidad

08/07/2026

CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface

Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface (Severity: MEDIUM). Tipo: Server-Side Request Forgery (SSRF). Producto afectado: PAN-OS.

firewallngfwpan-os PAN PSIRT

C Medio vulnerabilidad

07/07/2026

[CVE-2026-10659] The Dhara flash translation layer disk driver (drivers/disk/ftl_dhara.c) implemented the dhara_nand_…

The Dhara flash translation layer disk driver (drivers/disk/ftl_dhara.c) implemented the dhara_nand_ callbacks so that, on a flash error, the error code was written unconditionally through the caller-supplied dhara_error_t err pointer (e.g. *err = DHARA_E_ECC in dhara_nand_read, and similar in dhara_nand_erase/prog/copy). The upstream Dhara library calls these callbacks with err == NULL along its…

check-pointcheckpointmedio CVSS 4.7 NVD

C Medio vulnerabilidad

01/07/2026

[CVE-2026-53489] containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a b…

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.

check-pointcheckpointmedio CVSS 6.5 NVD

C Medio vulnerabilidad

24/06/2026

[CVE-2026-53017] In the Linux kernel, the following vulnerability has been resolved: f2fs: fix data loss caused by i…

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix data loss caused by incorrect use of nat_entry flag Data loss can occur when fsync is performed on a newly created file (before any checkpoint has been written) concurrently with a checkpoint operation. The scenario is as follows: create & write & fsync 'file A' write checkpoint - f2fs_do_sync_file // …

check-pointcheckpointmedio CVSS 5.5 NVD

C Medio vulnerabilidad

16/06/2026

[CVE-2026-48775] LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (b…

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 4.1.0 and prior, the JsonPlusSerializer can reconstruct Python objects from JSON checkpoint payloads. Under conditions where someone could modify checkpoint bytes at rest in the backing store, the deserialization path could reconstruct objects beyond w…

check-pointcheckpointmedio CVSS 6.8 NVD

C Medio vulnerabilidad

16/06/2026

[CVE-2026-47748] stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wa…

stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. Versions prior to master-584-0a7ae07 are vulnerable to an out-of-bounds reads error through PyTorch checkpoint pickle opcode parsing. The pickle .ckpt parser in src/model.cpp did not consistently check that enough input remained before reading opcode argu…

check-pointcheckpointmedio CVSS 5.5 NVD