Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,331
Total alertas
4744
Críticas
16966
Altas
8
Ransomware
1201
Esta semana
RSS
Q Crítico vulnerabilidad
10/06/2026
[CVE-2026-26240] A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can…
A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later
nvdcriticovulnerabilidad CVSS 9.1 NVD
Q Alto vulnerabilidad
10/06/2026
[CVE-2026-26239] A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gai…
A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5208 and later
nvdaltovulnerabilidad CVSS 8.1 NVD
Q Alto vulnerabilidad
10/06/2026
[CVE-2026-26237] A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can …
A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later
nvdaltovulnerabilidad CVSS 7.5 NVD
Q Alto vulnerabilidad
10/06/2026
[CVE-2026-24719] A command injection vulnerability has been reported to affect several QNAP operating system versions…
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3492 build 20260507 and later QuTS hero h5.2.9.3499 build 20260514 and later
nvdaltovulnerabilidad CVSS 7.2 NVD
Q Alto vulnerabilidad
10/06/2026
[CVE-2026-24724] An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote att…
An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass intended access restrictions. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later
nvdaltovulnerabilidad CVSS 8.1 NVD
Q Alto vulnerabilidad
10/06/2026
[CVE-2026-24716] A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system v…
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3492 build 20260507 and later QuTS hero h5.2.9.3499 build 20260514 and later…
nvdaltovulnerabilidad CVSS 7.2 NVD
Q Alto vulnerabilidad
10/06/2026
[CVE-2025-66281] A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system v…
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520…
nvdaltovulnerabilidad CVSS 7.2 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
Q Alto vulnerabilidad
10/06/2026
[CVE-2026-22893] A command injection vulnerability has been reported to affect several QNAP operating system versions…
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.35…
nvdaltovulnerabilidad CVSS 7.2 NVD
Q Alto vulnerabilidad
10/06/2026
[CVE-2025-66273] A command injection vulnerability has been reported to affect several QNAP operating system versions…
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.35…
nvdaltovulnerabilidad CVSS 7.2 NVD
Q Alto vulnerabilidad
10/06/2026
[CVE-2025-66279] A command injection vulnerability has been reported to affect several QNAP operating system versions…
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.35…
nvdaltovulnerabilidad CVSS 7.2 NVD
Q Alto vulnerabilidad
10/06/2026
[CVE-2025-66280] An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating s…
An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and …
nvdaltovulnerabilidad CVSS 7.2 NVD
Q Alto vulnerabilidad
10/06/2026
[CVE-2025-62850] A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system v…
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QuTS hero h5.2.9.3410 build 20260214 and later QuTS hero h5.3.4.3500 build 20260520 an…
nvdaltovulnerabilidad CVSS 7.2 NVD
Q Crítico vulnerabilidad
10/06/2026
[CVE-2025-66276] QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.…
QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later
nvdcriticovulnerabilidad CVSS 9.8 NVD
E Alto vulnerabilidad
10/06/2026
[CVE-2026-45542] ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5…
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a heap buffer overflow exists in the Security Scheme 2 (SRP6a) session-setup path of the protocomm component. The first-phase handler (handle_session_command0() in components/protocomm/src/security/security2.c) trusts the length of a client-supplied protobuf field for the SRP6a…
nvdaltovulnerabilidad CVSS 7.1 NVD
E Crítico vulnerabilidad
10/06/2026
[CVE-2026-45328] ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, …
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrappers in esp_secure_services.c and esp_secure_services_iram.c that bridge calls from the user application (i.e. the REE) to TEE-protected hardware peripherals (AES, SHA, ECC, HMAC, SPI, MMU, WDT) and to the security feature like attestation, OTA update…
nvdcriticovulnerabilidad CVSS 9.3 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
E Alto vulnerabilidad
10/06/2026
[CVE-2026-45329] ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, …
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secure-service wrappers in esp_secure_services.c and esp_secure_services_iram.c validated only some of the caller-supplied pointer arguments, leaving input pointer arguments unchecked. Because the underlying TEE-protected hardware peripherals (e.g., ECC, SHA, SPI) run in RISC-V machi…
nvdaltovulnerabilidad CVSS 7.1 NVD
E Alto vulnerabilidad
10/06/2026
[CVE-2026-45541] ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5…
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a NULL-pointer dereference exists in the WebSocket subprotocol-negotiation path of the esp_http_server component. While parsing the client-supplied Sec-WebSocket-Protocol request header during the WebSocket handshake, the tokenisation result is dereferenced without a NULL check…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
10/06/2026
[CVE-2026-53673] BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the messages REST AP…
BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the messages REST API that allows authenticated attackers to access arbitrary private message threads by supplying a user_id parameter in the request. Attackers can pass another user's identifier to the get_item_permissions_check method, which validates the supplied user_id instead of the logged-in user and is reused b…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
10/06/2026
[CVE-2026-53674] BuddyPress 14.4.0 contains a regular expression injection vulnerability in the activity mention reso…
BuddyPress 14.4.0 contains a regular expression injection vulnerability in the activity mention resolver that, when username compatibility mode is enabled, allows attackers to manipulate a REGEXP database clause by crafting mention names containing regex metacharacters. Attackers can submit @mentions whose metacharacters pass through esc_sql unescaped and are inserted into an unprepared REGEXP que…
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
10/06/2026
[CVE-2026-46541] Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus…
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, iIn handle_dht_get(), the DhtResults accumulator is only initialized when the first DHT record passes verification. If the first record fails (from a malicious DHT node), DhtResults is never created, and all subsequent valid records are discarded with "DHT inconsi…
nvdaltovulnerabilidad CVSS 7.5 NVD