Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "X" — 4146 resultados ✕ Limpiar búsqueda
22,419
Total alertas
4761
Críticas
17027
Altas
8
Ransomware
1260
Esta semana
RSS
30 días × Limpiar todo ×
M Alto vulnerabilidad
17/09/2026
[CVE-2026-86320] A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources wit…
A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary code execution with the privileges of the user running flatpak-builder.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Medio vulnerabilidad
17/09/2026
CVE-2026-72974 Microsoft Office Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-72974 Microsoft Office Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
officeinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
17/09/2026
CVE-2026-81387 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-81387 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
17/09/2026
CVE-2026-81390 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-81390 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
17/09/2026
CVE-2026-81399 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-81399 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
17/09/2026
CVE-2026-81391 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-81391 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
17/09/2026
CVE-2026-81401 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-81401 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Medio vulnerabilidad
17/09/2026
CVE-2026-81958 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-81958 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
17/09/2026
CVE-2026-81392 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-81392 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
17/09/2026
CVE-2026-81393 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-81393 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
17/09/2026
CVE-2026-81400 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-81400 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
17/09/2026
CVE-2026-81394 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-81394 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
17/09/2026
CVE-2026-81395 Microsoft Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-81395 Microsoft Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
17/09/2026
CVE-2026-85875 Microsoft Office Excel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-85875 Microsoft Office Excel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
officeinfo-disclosure Microsoft MSRC
M Crítico vulnerabilidad
17/09/2026
[CVE-2026-88795] The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authenticat…
The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester controls and creating it as a side effect of the check that is supposed to validate it, allowing unauthenticated attackers to predict the token and use the access it grants to write arbitrary files, leading to remote code execution.
nvdcriticovulnerabilidad CVSS 9.0 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
17/09/2026
[CVE-2026-91014] The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise an…
The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor's browser if they can trick the visitor into following a crafted link (reflected XSS).
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
17/09/2026
[CVE-2026-88792] The Dictionary WordPress plugin through 1.0 does not have authorisation, sanitisation or escaping in…
The Dictionary WordPress plugin through 1.0 does not have authorisation, sanitisation or escaping in place when adding or updating dictionary entries, allowing unauthenticated users to store arbitrary web scripts which will execute when a user views an affected entry.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
17/09/2026
[CVE-2026-85128] The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role reques…
The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration against the roles an administrator chose to offer, allowing unauthenticated users to request any role, including administrator, and to be granted it once the request is approved. Exploitation requires the Choose User Role at Registration WordPress plugin before 1.3.3's role selec…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
17/09/2026
[CVE-2026-85130] The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a p…
The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for the JavaScript context it is later output in on an administrative screen, allowing unauthenticated users to run arbitrary JavaScript in the session of an administrator who interacts with the logged entry. Only multisite installations are affected.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
17/09/2026
[CVE-2026-87796] The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in …
The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the move_file function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution poss…
nvdcriticovulnerabilidad CVSS 9.8 NVD