Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,181
Total alertas
4701
Críticas
16892
Altas
8
Ransomware
1055
Esta semana
RSS
cwe-20 × Limpiar todo ×
A Crítico vulnerabilidad
06/07/2026
[CVE-2026-48204] Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gr…
Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gridfs component. The camel-mongodb-gridfs producer selects the GridFS operation to perform from the gridfs.operation Exchange header when the endpoint's operation parameter is not set - which is the default. The control-header constants (GridFsConstants.GRIDFS_OPERATION, GRIDFS_OBJECT_ID, GRIDFS_MET…
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Crítico vulnerabilidad
06/07/2026
[CVE-2026-48205] Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel DNS comp…
Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel DNS component. The camel-dns producers read DNS operation parameters - the resolver to query, the name or domain to look up, the record type and class, and the search term - from Exchange message headers whose constant values (DnsConstants.DNS_SERVER, DNS_NAME, DNS_DOMAIN, DNS_TYPE, DNS_CLASS, TERM) were t…
nvdcriticovulnerabilidad CVSS 9.1 NVD
A Crítico vulnerabilidad
06/07/2026
[CVE-2026-46454] Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd componen…
Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd component maps inbound Bayeux (CometD) message headers into the Camel Exchange without applying a HeaderFilterStrategy. CometdBinding.populateExchangeFromMessage copies the entire ext.CamelHeaders map supplied by the CometD client directly onto the Camel message (message.setHeaders), so any header name - in…
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Crítico vulnerabilidad
06/07/2026
[CVE-2026-46456] Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs com…
Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs component map inbound message attributes into the Camel Exchange through a component-specific HeaderFilterStrategy. Sqs2HeaderFilterStrategy configured only an outbound filter (setOutFilterPattern, which blocks Camel*, breadcrumbId and org.apache.camel.* headers being written to the broker) but did not…
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Alto vulnerabilidad
06/07/2026
[CVE-2026-46457] Improper Input Validation vulnerability in Apache Camel NATS component. The camel-nats component ma…
Improper Input Validation vulnerability in Apache Camel NATS component. The camel-nats component maps inbound NATS message headers into the Camel Exchange but defaulted its headerFilterStrategy to a bare new DefaultHeaderFilterStrategy() with no inbound rules configured (NatsConfiguration). With no inFilter, inFilterPattern or inFilterStartsWith set, DefaultHeaderFilterStrategy.applyFilterToExter…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
04/07/2026
[CVE-2026-14637] A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd…
A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7. The affected element is the function getCartItems in the library application/libraries/ShoppingCart.php. The manipulation of the argument shopping_cart leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed publicly and ma…
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58292] Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exec…
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
03/07/2026
[CVE-2026-57985] Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exec…
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.6 NVD
M Crítico vulnerabilidad
03/07/2026
[CVE-2026-22547] Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including l…
Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited template fields and trust model or object format values.
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-13341] A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.…
A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.
nvdaltovulnerabilidad CVSS 7.4 NVD
U Alto vulnerabilidad
02/07/2026
[CVE-2026-54405] A malicious actor with access to the network could exploit an Improper Input Validation vulnerabilit…
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS) attack on the application.
nvdaltovulnerabilidad CVSS 7.5 NVD
U Crítico vulnerabilidad
02/07/2026
[CVE-2026-54402] A malicious actor with access to the network and low privileges could exploit an Improper Input Vali…
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device.
nvdcriticovulnerabilidad CVSS 9.9 NVD
U Crítico vulnerabilidad
02/07/2026
[CVE-2026-50748] A malicious actor with access to the network and low privileges could exploit an Improper Input Vali…
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
nvdcriticovulnerabilidad CVSS 9.9 NVD
G Alto vulnerabilidad
01/07/2026
[CVE-2026-14428] Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.4…
Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD
G Alto vulnerabilidad
01/07/2026
[CVE-2026-14429] Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a…
Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
G Crítico vulnerabilidad
01/07/2026
[CVE-2026-14411] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed …
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Alto vulnerabilidad
01/07/2026
[CVE-2026-14412] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed …
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD
G Alto vulnerabilidad
01/07/2026
[CVE-2026-14401] Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.…
Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD
G Crítico vulnerabilidad
01/07/2026
[CVE-2026-14382] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed …
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
01/07/2026
[CVE-2026-38891] An improper input validation in the gazebo_ros_diff_drive.cpp component of gazebo_plugins v3.9.0 all…
An improper input validation in the gazebo_ros_diff_drive.cpp component of gazebo_plugins v3.9.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted geometry_msgs::Twist message.
nvdaltovulnerabilidad CVSS 7.5 NVD