Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Ni" — 7516 resultados ✕ Limpiar búsqueda
22,725
Total alertas
4810
Críticas
17268
Altas
8
Ransomware
1416
Esta semana
RSS
M Alto vulnerabilidad
28/08/2026
[CVE-2026-42391] An unauthenticated attacker can send an IMAP ID command with a very large number of parameters befor…
An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by the same process. This can cause degradation or denial of service for IMAP logins. Limit the number of…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
28/08/2026
[CVE-2026-27852] An attacker that can send mail to a user can craft a message whose headers contain a very large numb…
An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit of the process and terminate it, causing denial of service for the affected user. Update to non-vulner…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
28/08/2026
[CVE-2026-33605] An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed com…
An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode (default for community releases), only the attacker's own connection is terminated. If running in high-performance mode (default for Pro releases), all connections handled by the same managesieve-login process are terminated. Repeating the…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
28/08/2026
[CVE-2026-79996] The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability chec…
The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator access to change arbitrary site options and escalate their privileges to administrator.
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
28/08/2026
[CVE-2026-6286] The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stor…
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customer name fields in versions up to and including 2.2. This is due to an authentication bypass where the AddBookingCommand explicitly skips nonce verification (Command.php line 186), allowing unauthenticated users to submit booking data. While the plugin applies saniti…
nvdaltovulnerabilidad CVSS 7.2 NVD
M Crítico vulnerabilidad
28/08/2026
[CVE-2026-40541] An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilit…
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM.
nvdcriticovulnerabilidad CVSS 9.0 NVD
M Alto vulnerabilidad
28/08/2026
[CVE-2026-14558] The User Frontend WordPress plugin before 4.3.10 does not properly validate field type definitions …
The User Frontend WordPress plugin before 4.3.10 does not properly validate field type definitions and deserialises user-controlled post metadata when rendering submitted posts, allowing users with Editor-level access and above to inject arbitrary PHP objects, which can lead to remote code execution when a suitable POP chain is present on the site.
nvdaltovulnerabilidad CVSS 7.2 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-78914 Uninitialized resource in Skia
Microsoft publica advisory de seguridad: Chromium: CVE-2026-78914 Uninitialized resource in Skia.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-78940 Improper initialization in Network
Microsoft publica advisory de seguridad: Chromium: CVE-2026-78940 Improper initialization in Network.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-78958 Uninitialized resource in Skia
Microsoft publica advisory de seguridad: Chromium: CVE-2026-78958 Uninitialized resource in Skia.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-78962 Uninitialized resource in WebXR
Microsoft publica advisory de seguridad: Chromium: CVE-2026-78962 Uninitialized resource in WebXR.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-78965 Uninitialized resource in ANGLE
Microsoft publica advisory de seguridad: Chromium: CVE-2026-78965 Uninitialized resource in ANGLE.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-78969 Uninitialized resource in Video
Microsoft publica advisory de seguridad: Chromium: CVE-2026-78969 Uninitialized resource in Video.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-78977 Uninitialized resource in GPU
Microsoft publica advisory de seguridad: Chromium: CVE-2026-78977 Uninitialized resource in GPU.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-78984 Uninitialized resource in GPU
Microsoft publica advisory de seguridad: Chromium: CVE-2026-78984 Uninitialized resource in GPU.
Microsoft MSRC

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-78986 Uninitialized resource in GPU
Microsoft publica advisory de seguridad: Chromium: CVE-2026-78986 Uninitialized resource in GPU.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-79006 Protection mechanism failure in HttpsUpgrades
Microsoft publica advisory de seguridad: Chromium: CVE-2026-79006 Protection mechanism failure in HttpsUpgrades.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-79007 Uninitialized resource in GPU
Microsoft publica advisory de seguridad: Chromium: CVE-2026-79007 Uninitialized resource in GPU.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-79040 Uninitialized resource in GPU
Microsoft publica advisory de seguridad: Chromium: CVE-2026-79040 Uninitialized resource in GPU.
Microsoft MSRC
M Alto vulnerabilidad
28/08/2026
[CVE-2026-76053] The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulner…
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser in all versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute…
nvdaltovulnerabilidad CVSS 7.2 NVD