Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 10 min
13,735
Total alertas
3106
Críticas
10357
Altas
8
Ransomware
1066
Esta semana
RSS
Este mes × Limpiar todo ×
M Alto vulnerabilidad
11/08/2026
[CVE-2026-15567] A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2…
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
11/08/2026
[CVE-2026-10579] A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged …
A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauthed attacker to authenticate as any principal in any role. This could lead to information disclosure, access to restricted operations, or other flaws.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-15554] the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any sh…
the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP protocol.
nvdaltovulnerabilidad CVSS 7.4 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-15555] A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicat…
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-15556] A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion …
A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protected application.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-15560] when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs …
when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-15561] A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and cou…
A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service.
nvdaltovulnerabilidad CVSS 7.5 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
11/08/2026
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability. Tipo: Suplantación (Spoofing).
sharepointspoofing Microsoft MSRC
M Medio vulnerabilidad
11/08/2026
CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability. Tipo: Divulgación de Información.
sharepointinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
11/08/2026
CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability. Tipo: Manipulación (Tampering).
sharepoint Microsoft MSRC
R Alto vulnerabilidad
11/08/2026
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability. Tipo: Suplantación (Spoofing).
sharepointspoofing Microsoft MSRC
M Medio vulnerabilidad
11/08/2026
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
11/08/2026
CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability. Tipo: Divulgación de Información.
visual-studioinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
11/08/2026
CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
11/08/2026
CVE-2026-59130 AMD Zen Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-59130 AMD Zen Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Medio vulnerabilidad
11/08/2026
CVE-2026-59135 Microsoft Windows Search Component Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-59135 Microsoft Windows Search Component Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
11/08/2026
CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
11/08/2026
CVE-2026-59137 Windows Event Logging Service Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-59137 Windows Event Logging Service Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
11/08/2026
CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
11/08/2026
CVE-2026-61350 Windows NTFS Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-61350 Windows NTFS Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC