Alertas de Seguridad de la Información

M Alto vulnerabilidad

19/08/2026

Vulnerabilidad alta de inyección de comandos en routers TRENDnet 1.1.02b01

Se ha identificado una falla de inyección de comandos en routers TRENDnet versión 1.1.02b01 a través del parámetro wan_type en /cgi-bin/ping.cgi. Un atacante remoto puede explotar esta vulnerabilidad sin autenticación para ejecutar comandos arbitrarios en el dispositivo. Esta falla afecta directamente infraestructuras de pequeñas y medianas empresas en LATAM que utilizan estos routers como punto de acceso perimetral.

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

19/08/2026

[CVE-2026-75986] A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element i…

A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

19/08/2026

[CVE-2026-75984] A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown function of th…

A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown function of the file /cgi-bin/admin.cgi. The manipulation of the argument Hostname results in command injection. The attack can be launched remotely. The exploit is now public and may be used.

nvdaltovulnerabilidad CVSS 7.4 NVD

M Crítico vulnerabilidad

19/08/2026

[CVE-2026-75976] A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of …

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan_l2tp_password causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-73939] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks o…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Crítico vulnerabilidad

18/08/2026

[CVE-2026-73930] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of…

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-73931] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of…

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-73928] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-73929] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of…

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-73886] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-73885] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks o…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-73875] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks o…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-73876] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-71155] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).…

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of…

nvdaltovulnerabilidad CVSS 8.5 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-71142] Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communicat…

Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security Component). Supported versions that are affected are 7.5.0-7.5.1, 7.6.0-7.8.0 and 8.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Unified Inventory Management. Successful attacks of …

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-71143] Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communicat…

Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Third Party). Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0-7.8.0 and 8.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Unified Inventory Management. Successful attacks of this…

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-71136] Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The …

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impac…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-71138] Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The …

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impac…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-71126] Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The …

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impa…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

18/08/2026

[CVE-2026-71129] Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The …

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impac…

nvdaltovulnerabilidad CVSS 8.2 NVD