Alertas de Seguridad de la Información

A Crítico vulnerabilidad

06/07/2026

[CVE-2026-53913] Improper Authentication, Missing Authentication for Critical Function, Not Failing Securely ('Failin…

Improper Authentication, Missing Authentication for Critical Function, Not Failing Securely ('Failing Open') vulnerability in Apache Camel Keycloak Component. The KeycloakSecurityPolicy of camel-keycloak guards a route by running KeycloakSecurityProcessor.beforeProcess(), which performs three checks in sequence: it rejects a request that carries no access token, then - only if requiredRoles is no…

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Alto vulnerabilidad

06/07/2026

[CVE-2026-46591] Improper Neutralization of Special Elements in Data Query Logic vulnerability in Apache Camel Neo4J …

Improper Neutralization of Special Elements in Data Query Logic vulnerability in Apache Camel Neo4J component. The camel-neo4j producer builds the Cypher WHERE clause for its match/retrieve and delete operations from the CamelNeo4jMatchProperties map. CVE-2025-66169 addressed Cypher injection through the property values by binding them as query parameters ($paramN), but the property names (the JS…

nvdaltovulnerabilidad CVSS 8.2 NVD

A Crítico vulnerabilidad

06/07/2026

[CVE-2026-46455] Insufficient Session Expiration vulnerability in Apache Camel Keycloak Component. The camel-keycloa…

Insufficient Session Expiration vulnerability in Apache Camel Keycloak Component. The camel-keycloak security helper KeycloakSecurityHelper.parseAndVerifyAccessToken builds a Keycloak TokenVerifier using withChecks(...) with only the subject-exists check and the realm-URL (issuer) check. Keycloak's TokenVerifier.withChecks(...) appends to an initially empty check list - the upstream default check…

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Alto vulnerabilidad

06/07/2026

[CVE-2026-24012] Uncontrolled Resource Consumption vulnerability in Apache IoTDB.  Some interface fails to impose re…

Uncontrolled Resource Consumption vulnerability in Apache IoTDB.  Some interface fails to impose reasonable limits on the time span and aggregation interval of the query. An attacker can construct a request with extreme parameters (e.g., a very large time range combined with a minimal interval). This forces the DataNode to build an enormous result set in memory, which exhausts the Java heap and c…

nvdaltovulnerabilidad CVSS 7.5 NVD

A Crítico vulnerabilidad

06/07/2026

[CVE-2026-24014] Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trig…

Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal DataNode RPC port is exposed to an untrusted network, an attacker may use path traversal sequences in the JAR name to write files outside the intended Trigger installation directory. This could allow arbitrary file writ…

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

06/07/2026

[CVE-2026-40047] Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in …

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Camel Docling component. The camel-docling component invokes the external `docling` command-line tool by assembling an argument list in DoclingProducer and executing it through java.lang.ProcessBuilder. Custom CLI arguments supplied through the `CamelDoclingCustomArguments` exchange header (…

nvdcriticovulnerabilidad CVSS 9.1 NVD

A Alto vulnerabilidad

06/07/2026

[CVE-2026-43865] Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-haze…

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no user-supplied HazelcastInstance, hazelcastConfigUri, or referenced Config bean is provided - neither Haz…

nvdaltovulnerabilidad CVSS 8.1 NVD

A Alto vulnerabilidad

06/07/2026

[CVE-2026-43866] Deserialization of Untrusted Data vulnerability in Apache Camel, Apache Camel JMS component. JmsBin…

Deserialization of Untrusted Data vulnerability in Apache Camel, Apache Camel JMS component. JmsBinding.extractBodyFromJms() in camel-jms - and the equivalent JmsBinding in camel-sjms - deserializes the payload of an incoming JMS ObjectMessage via jakarta.jms.ObjectMessage.getObject() whenever the mapJmsMessage option is enabled (the default) and Camel acts as a JMS consumer. The CVE-2026-40860 h…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Crítico vulnerabilidad

06/07/2026

[CVE-2026-6382] The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4…

The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager Pro WordPress plugin before 2.1.1, File Manager WordPress plugin before 8.0.4 do not properly escape a parameter before passing it to a shell command when processing image operations, allowing authenticated users to perform OS Command Injection. This requires the server to have th…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

06/07/2026

[CVE-2024-6228] The Notifications for Forms & WordPress Actions WordPress plugin before 2.6 does not validate a user…

The Notifications for Forms & WordPress Actions WordPress plugin before 2.6 does not validate a user-supplied value before using it to build a server-side file inclusion path, allowing authenticated users with subscriber-level access and above to include and execute arbitrary local PHP files on the server.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

05/07/2026

[CVE-2026-14768] A weakness has been identified in code-projects Real State Services 1.0. This vulnerability affects …

A weakness has been identified in code-projects Real State Services 1.0. This vulnerability affects unknown code of the file /builderHome.php. This manipulation of the argument loc causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

05/07/2026

[CVE-2026-14736] A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown f…

A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user_auth_commit.php. Performing a manipulation of the argument upload_image results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

04/07/2026

[CVE-2026-12740] Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter…

Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter. RequestTokenV2 builds the provider authorization redirect without issuing a state value, and AccessTokenV2 exchanges the callback code and registers the resulting token into the session (register_session) without verifying that the callback corresponds to an authorization request this session ini…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

04/07/2026

[CVE-2026-12746] Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 st…

Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The authentication_url method builds the provider authorization redirect without issuing a state value, and the callback method exchanges the callback code and registers the resulting token into the session without verifying that the callback corresponds to an authorization request t…

nvdaltovulnerabilidad CVSS 8.1 NVD

L Alto vulnerabilidad

04/07/2026

[CVE-2026-53360] In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scrat…

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use As per the GHCB spec, when using GHCB v2+ require the software scratch area to reside in the GHCB's shared buffer. Note, things like Page State Change (PSC) requests _rely_ on this behavior, as the guest can't provide a length when making the request, i.e. the size of…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

04/07/2026

[CVE-2025-71375] picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning …

picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payloads using _operator.methodcaller that evade detection and execute arbitrary code when loaded by pickle.load().

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

04/07/2026

[CVE-2025-71364] picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start fun…

picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickle reduce methods, allowing remote code execution. Attackers can craft malicious pickle files embedding this built-in function that evade detection but execute arbitrary commands when loaded.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

04/07/2026

[CVE-2025-71353] picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.Gu…

picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.GuardBuilder.get function in reduce methods. Attackers can craft pickle files with embedded code that evades picklescan detection and executes arbitrary commands when loaded.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

03/07/2026

[CVE-2026-58426] Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross…

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Alto vulnerabilidad

03/07/2026

[CVE-2026-28737] Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsReq…

Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsRequired field in glTF files rendered by the 3D file viewer.

nvdaltovulnerabilidad CVSS 8.7 NVD