Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,345
Total alertas
4745
Críticas
16970
Altas
8
Ransomware
1213
Esta semana
RSS
alto × 30 días × Limpiar todo ×
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83008] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeo…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83009] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover …
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83010] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks require human interaction from a person othe…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83011] Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen…
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83012] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Captur…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-82996] Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen…
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Platform Security for Java executes to compromise Oracle Platform Security for Java. S…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83002] Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic…
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly imp…
nvdaltovulnerabilidad CVSS 8.5 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83003] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Captur…
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-82992] Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). …
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CR…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-82993] Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi…
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significan…
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76820] OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.…
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny list or reject private, loopback, and link-local destinations, allowing an authenticated account with the …
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76690] A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may all…
A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker could exploit this vulnerability by providing a specially crafted input to the affected component. Successful exploitation could result in remote code execution as root.
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76691] Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gatew…
Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlying operating system.
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76692] A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacen…
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service (system crash) or the disclosure of uninitialized stack memory.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76693] A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote …
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service against certain services running on impacted Gateways.
nvdaltovulnerabilidad CVSS 7.0 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76681] A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote at…
A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information beyond what is authorized by the user's existing privilege level. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by EdgeConnect SD-…
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76682] A vulnerability in the network security monitoring component of intrusion detection systems could al…
A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on the system.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76683] Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gatew…
Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to com…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76684] Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator th…
Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76685] A vulnerability exists in the proxy packet processing logic of the affected component where it impro…
A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful exploitation could result in a buffer overflow, potentially leading to remote code execution or denial-…
nvdaltovulnerabilidad CVSS 8.1 NVD