Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,082
Total alertas
4667
Críticas
16827
Altas
8
Ransomware
1014
Esta semana
RSS
cwe-119 × Limpiar todo ×
M Alto vulnerabilidad
29/06/2026
[CVE-2026-13518] A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat …
A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/06/2026
[CVE-2026-13515] A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function form…
A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the argument startIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/06/2026
[CVE-2026-13516] A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSe…
A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. Performing a manipulation of the argument shareSpeed results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
21/06/2026
[CVE-2026-12806] A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function for…
A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. The manipulation of the argument selSSID leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early ab…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/06/2026
[CVE-2026-42488] Some shadow paging errors paths will switch the page-tables without updating the currently running v…
Some shadow paging errors paths will switch the page-tables without updating the currently running vCPU reference. This causes a mismatch between the loaded page-tables and the mapcache metadata which can lead to corruption of the mapcache.
nvdaltovulnerabilidad CVSS 8.1 NVD
G Alto vulnerabilidad
16/06/2026
[CVE-2026-0152] In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to…
In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
16/06/2026
[CVE-2026-0139] In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to …
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 8.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12326] Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of…
Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12327] Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbir…
Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12314] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12317] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird …
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12318] Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Fir…
Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12310] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12312] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12305] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 7.5 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12290] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-12292] Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 15…
Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Crítico vulnerabilidad
16/06/2026
[CVE-2026-12297] Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability …
Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-12220] A vulnerability has been found in Yealink SIP-T46U 108.86.0.118. This affects the function mod_upgra…
A vulnerability has been found in Yealink SIP-T46U 108.86.0.118. This affects the function mod_upgrade.SparePartsUpload of the file /api/upgrade/accupgradebychunk of the component Firmware Chunk Upload handler. Such manipulation of the argument uid leads to stack-based buffer overflow. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may b…
nvdaltovulnerabilidad CVSS 8.0 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-12221] A vulnerability was found in Yealink SIP-T46U 108.86.0.118. This impacts the function sprintf of the…
A vulnerability was found in Yealink SIP-T46U 108.86.0.118. This impacts the function sprintf of the file /api/upgrade/upgrade of the component Firmware Chunk Upload Handler. Performing a manipulation of the argument uid/start_offset results in stack-based buffer overflow. The attack needs to be approached within the local network. The exploit has been made public and could be used. The vendor was…
nvdaltovulnerabilidad CVSS 8.0 NVD