Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,949
Total alertas
3186
Críticas
10491
Altas
8
Ransomware
1211
Esta semana
RSS
M Crítico vulnerabilidad
11/08/2026
[CVE-2026-72748] AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json…
AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpoint that allows remote attackers to write up to 4 GB of arbitrary content to the server filesystem via HTTP PUT requests without authentication. Attackers can exhaust disk space causing denial of service, poison the video encoding pipeline, or chain this with local file inclusion to achiev…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-69109] A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affec…
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-64629] A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (…
A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230). The affected applications contains an out of bounds read vulnerability while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Crítico vulnerabilidad
11/08/2026
[CVE-2026-58115] A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions <…
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unauthenticated access to programming nodes that are capable of executing system commands on the server. This could allow an unauthenticated remote attac…
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-59086] A vulnerability has been identified in Simcenter Nastran (All versions < V2606). The affected applic…
A vulnerability has been identified in Simcenter Nastran (All versions < V2606). The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current process.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-59700] A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected app…
A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-59701] A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected app…
A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.
nvdaltovulnerabilidad CVSS 7.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
11/08/2026
[CVE-2026-50058] A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Ed…
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains an out of bounds read vulnerability while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-50059] A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Ed…
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains an out of bounds write vulnerability while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-50060] A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Ed…
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-50061] A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Ed…
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-50062] A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Ed…
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-50063] A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Ed…
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-50064] A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Ed…
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains an out of bounds write vulnerability while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the current process.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Crítico vulnerabilidad
11/08/2026
[CVE-2026-18972] An authenticated attacker can spoof another GUI user's identity by sending their request with the cu…
An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \"Grpc-Metadata-USER\". This can lead to an account takeover attack from a user with low privileges to administrator.
nvdcriticovulnerabilidad CVSS 9.6 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
11/08/2026
Inyección SQL alta en Koha permite lectura de bases de datos a usuarios autenticados
Koha versiones 24.11.17, 25.05.12, 25.11.06 y 26.05.01 contiene una vulnerabilidad de inyección SQL en el módulo de adquisiciones (acqui/parcels.pl) que permite a personal autenticado con permisos de recepción de órdenes leer contenido arbitrario de la base de datos manipulando el parámetro 'orderby'. Esta exposición afecta directamente a bibliotecas, instituciones educativas y organismos públicos en LATAM que gestionan inventarios bibliográficos mediante Koha.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
11/08/2026
Vulnerabilidad alta de control de acceso en Idurar ERP CRM 4.1.0 expone facturas con datos personales
Idurar IDURAR ERP CRM versión 4.1.0 contiene una vulnerabilidad de control de acceso roto que permite a atacantes no autenticados descargar archivos PDF de facturas con información personal de clientes a través de la ruta /download sin credenciales. Los atacantes pueden enumerar identificadores de MongoDB para acceder a cualquier factura del sistema. Este riesgo es alta para pymes en México y Latinoamérica que procesan datos fiscales y de clientes a través de esta plataforma de gestión empresarial.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
11/08/2026
Vulnerabilidad alta de control de acceso en CSZ CMS 1.3.2 expone datos personales
CSZ CMS 1.3.2 contiene una vulnerabilidad de control de acceso defectuoso que permite a atacantes no autenticados acceder a todos los envíos de formularios de contacto, incluyendo información de identificación personal. El endpoint del visor de envíos carece de validación de autenticación y el framework falla en modo abierto. Empresas en México y LATAM que utilizan esta versión exponen datos de clientes, proveedores y contactos sin necesidad de credenciales.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
11/08/2026
Vulnerabilidad de path traversal en AsyncFuncAI deepwiki-open permite acceso no autenticado
Se reporta una vulnerabilidad de traversal de directorios (CVE-2026-72602, CVSS 7.5) en AsyncFuncAI deepwiki-open que permite a atacantes remotos sin autenticación enumerar la estructura de directorios del servidor a través del endpoint local-repository. El problema existe porque WIKI_AUTH_MODE está deshabilitado por defecto, exponiendo rutas arbitrarias del sistema de archivos. Empresas en LATAM que usen esta herramienta de wikis abiertas enfrentan riesgo de exposición de información sensible y reconocimiento del sistema.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
11/08/2026
Inyección de comandos OS en wg-easy 15.3.0 permite ejecución como root
Una vulnerabilidad crítica en wg-easy 15.3.0 permite a usuarios con permiso clients.create ejecutar comandos arbitrarios como root mediante inyección de directivas WireGuard malformadas en el campo de nombre del cliente. El software no sanitiza caracteres de salto de línea en la configuración, exponiendo servidores VPN corporativos en LATAM que utilicen esta herramienta de gestión. El acceso requerido es limitado, pero el impacto potencial es total compromiso del sistema.
nvdcriticovulnerabilidad CVSS 9.9 NVD