Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Ni" — 7474 resultados ✕ Limpiar búsqueda
22,662
Total alertas
4794
Críticas
17221
Altas
8
Ransomware
1396
Esta semana
RSS
M Medio vulnerabilidad
08/09/2026
CVE-2026-77896 Windows Remote Desktop Client Denial of Service Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-77896 Windows Remote Desktop Client Denial of Service Vulnerability. Tipo: Denegación de Servicio (DoS).
windowsdos Microsoft MSRC
M Medio vulnerabilidad
08/09/2026
CVE-2026-78523 Windows DNS Server Denial of Service Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-78523 Windows DNS Server Denial of Service Vulnerability. Tipo: Denegación de Servicio (DoS).
windowsdos Microsoft MSRC
M Medio vulnerabilidad
08/09/2026
CVE-2026-81377 Visual Studio Code Tampering Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-81377 Visual Studio Code Tampering Vulnerability. Tipo: Manipulación (Tampering).
visual-studio Microsoft MSRC
M Medio vulnerabilidad
08/09/2026
CVE-2026-83991 Windows Cloud Files Mini Filter Driver Tampering Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-83991 Windows Cloud Files Mini Filter Driver Tampering Vulnerability. Tipo: Manipulación (Tampering).
windows Microsoft MSRC
M Medio vulnerabilidad
08/09/2026
CVE-2026-62762 Windows Active Directory Domain Services Denial of Service Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-62762 Windows Active Directory Domain Services Denial of Service Vulnerability. Tipo: Denegación de Servicio (DoS).
windowsdos Microsoft MSRC
M Medio vulnerabilidad
08/09/2026
CVE-2026-67641 Microsoft SQL Server Denial of Service Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-67641 Microsoft SQL Server Denial of Service Vulnerability. Tipo: Denegación de Servicio (DoS).
sql-serverdos Microsoft MSRC
M Medio vulnerabilidad
08/09/2026
CVE-2026-69321 Windows Power Dependency Coordinator Tampering Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-69321 Windows Power Dependency Coordinator Tampering Vulnerability. Tipo: Manipulación (Tampering).
windows Microsoft MSRC

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Crítico vulnerabilidad
08/09/2026
[CVE-2026-86510] A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params …
A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Crítico vulnerabilidad
08/09/2026
[CVE-2026-86509] A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of t…
A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-76958] SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources i…
SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components. An attacker with low privileges could submit specially crafted XML payloads containing malicious external entity declarations. Successful exploitation could allow the attacker to read sensitive file contents from the server and expose them through monitoring or logging…
nvdaltovulnerabilidad CVSS 8.5 NVD
M Crítico vulnerabilidad
08/09/2026
[CVE-2026-66768] SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked fro…
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger affected functionality. This could allow arbitrary command execution on the victim's machine, leading to a high impact on the confidentiality, integrity, and avai…
nvdcriticovulnerabilidad CVSS 9.0 NVD
M Crítico vulnerabilidad
08/09/2026
[CVE-2026-44756] A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Und…
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availabil…
nvdcriticovulnerabilidad CVSS 10.0 NVD
F Medio vulnerabilidad
08/09/2026
Arbitrary process termination from exposed minifilter communication port
Fortinet PSIRT publica advisory de seguridad: Arbitrary process termination from exposed minifilter communication port. Tipo: Vulnerabilidad de seguridad. Producto afectado: Forticlient.
firewallforticlient PAN PSIRT
F Crítico vulnerabilidad
08/09/2026
JWT used for authentication in web GUI signed with static key
Fortinet PSIRT publica advisory de seguridad: JWT used for authentication in web GUI signed with static key. Tipo: Vulnerabilidad de seguridad. Producto afectado: Fortimonitor.
firewall PAN PSIRT
M Alto vulnerabilidad
07/09/2026
[CVE-2026-86439] knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing atta…
knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, create, overwrite and delete files outside the project directory. Attackers can supply path arguments containing directory traversal sequences to access arbitrary Markdown files accessible to the server process.
nvdaltovulnerabilidad CVSS 8.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
07/09/2026
[CVE-2026-86541] knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() func…
knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() function that allows attackers to overwrite arbitrary files outside the project root. Attackers can supply absolute paths or relative paths containing directory traversal sequences to write malicious content to sensitive files like shell startup scripts or SSH configuration files.
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
07/09/2026
[CVE-2026-86437] Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with o…
Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edit permission, allowing non-Superadmin administrators to upload and extract arbitrary zip archives over the live application source code. Attackers can upload a malicious archive containing modified application files such as routes/web.php with embedded system commands, which exec…
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
07/09/2026
[CVE-2026-86438] Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire a…
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-Superadmin administrators to install modules. Attackers can download and auto-activate arbitrary PHP modules from the marketplace over unsigned HTTP requests, achieving remote code execution.
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
07/09/2026
[CVE-2026-86494] In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links…
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
07/09/2026
[CVE-2026-79691] Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5…
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
nvdaltovulnerabilidad CVSS 7.3 NVD