Alertas de Seguridad de la Información

M Alto vulnerabilidad

20/06/2026

[CVE-2026-9843] The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to arbi…

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the view_page function in all versions up to, and including, 1.5.1. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is dele…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

19/06/2026

[CVE-2026-49339] gonic is a music streaming server / free-software subsonic server API implementation. The maintainer…

gonic is a music streaming server / free-software subsonic server API implementation. The maintainer's fix in commit `6dd71e6a3c966867ef8c900d359a7df75789f410` added an ownership check based on `playlist.UserID`. However, `playlist.UserID` is derived from the first path segment of the attacker-controlled playlist ID, with no path containment on the resolved file path. Any authenticated Subsonic u…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

19/06/2026

[CVE-2026-49340] gonic is a music streaming server / free-software subsonic server API implementation. Prior to versi…

gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, a logic error in `ServeCreateOrUpdatePlaylist` allows any authenticated Subsonic user (including non-admin) to write playlist M3U content to an attacker-controlled absolute filesystem path on the gonic host, and to create intermediate directories with `0o777` permissions. The bug is indep…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

19/06/2026

[CVE-2026-8713] The Avada (Fusion) Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insu…

The Avada (Fusion) Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybe_delete_files function in all versions up to, and including, 3.15.3. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-confi…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

19/06/2026

[CVE-2026-54414] FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/fo…

FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/folder/uploadToSharedFolder.php), leading to arbitrary file write and administrator account takeover. The upload filename is validated by FolderController with basename() and REGEX_FILE_NAME, which permit URL-encoded sequences (the regex blocks / and \ but not %). The raw filename is then passed to Up…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-56078] PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to …

PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enabling sensitive disclosure, denial of service, or code execution.

nvdaltovulnerabilidad CVSS 8.8 NVD

O Alto vulnerabilidad

18/06/2026

[CVE-2026-54017] Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. P…

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the terminal-server reverse proxy in `backend/open_webui/routers/terminals.py` does not fully confine the user-controlled `path` segment before forwarding it to an admin-configured terminal server. An authenticated user who has been granted access to a terminal server can craft `path`…

nvdaltovulnerabilidad CVSS 7.7 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-48716] nanobot is a personal AI assistant. In versions 0.1.5.post3 and prior, the WhatsApp bridge in bridge…

nanobot is a personal AI assistant. In versions 0.1.5.post3 and prior, the WhatsApp bridge in bridge/src/whatsapp.ts constructs a filesystem path using the fileName field from an incoming WhatsApp document message without sanitization. The WhatsApp bridge downloads media attachments and writes them to disk using a filename derived from the sender's message via documentMessage.fileName, which is co…

nvdaltovulnerabilidad CVSS 8.7 NVD

M Crítico vulnerabilidad

18/06/2026

[CVE-2026-48768] TypeBot is a chatbot builder tool. In versions 3.16.1 and earlier, POST /api/blocks/file-input/v3/ge…

TypeBot is a chatbot builder tool. In versions 3.16.1 and earlier, POST /api/blocks/file-input/v3/generate-upload-url is unauthenticated and uses unsanitized fileName input to construct public/ S3 object keys, while issuing presigned PUT URLs that do not bind Content-Type. As a result, any anonymous visitor to a published bot with a file input can upload attacker-controlled HTML, SVG, or JS to att…

nvdcriticovulnerabilidad CVSS 9.3 NVD

M Alto vulnerabilidad

17/06/2026

[CVE-2026-53872] picklescan before 0.0.35 contains an unsafe pickle deserialization vulnerability allowing unauthenti…

picklescan before 0.0.35 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to read arbitrary server files by chaining io.FileIO and urllib.request.urlopen. Attackers can bypass RCE-focused blocklists to exfiltrate sensitive data like /etc/passwd to external servers.

nvdaltovulnerabilidad CVSS 7.5 NVD

C Crítico vulnerabilidad

17/06/2026

[CVE-2026-20181] A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute ar…

A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

17/06/2026

[CVE-2026-54193] Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions.

Contributor Arbitrary File Deletion in Fusion Builder

nvdaltovulnerabilidad CVSS 7.7 NVD

M Alto vulnerabilidad

17/06/2026

[CVE-2025-69128] Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in EMV …

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in EMV JobCareer allows Path Traversal. This issue affects JobCareer: from n/a through 7.3.

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

17/06/2026

[CVE-2026-9690] Unauthenticated Arbitrary File Download in WP Media folder Addon <= 4.0.1 versions.

Unauthenticated Arbitrary File Download in WP Media folder Addon

nvdaltovulnerabilidad CVSS 7.5 NVD

A Crítico vulnerabilidad

17/06/2026

[CVE-2026-50203] A path traversal in the SFTP provider (`SFTPHook.retrieve_directory` / `SFTPOperator(operation=get)`…

A path traversal in the SFTP provider (`SFTPHook.retrieve_directory` / `SFTPOperator(operation=get)`) let a malicious or compromised remote SFTP server write files outside the configured local destination directory via crafted directory-entry names. No Airflow account is required — the attack surface is any deployment downloading directories from an untrusted SFTP server. Upgrade `apache-airflow-p…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

17/06/2026

[CVE-2026-48055] Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versi…

Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and prior, a high-severity Zip Slip vulnerability was identified in Streambert's subtitle extraction logic. The application does not sanitize archive entry filenames during extraction, allowing a malicious archive to perform path traversal and write arbitrary files to the host filesystem. …

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

17/06/2026

[CVE-2026-27400] Unauthenticated Arbitrary File Deletion in BookPro <= 1.1.0 versions.

Unauthenticated Arbitrary File Deletion in BookPro

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

17/06/2026

[CVE-2026-22334] Subscriber Arbitrary File Download in Woocommerce Book Price <= 1.3 versions.

Subscriber Arbitrary File Download in Woocommerce Book Price

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

17/06/2026

[CVE-2026-10094] A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 t…

A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

17/06/2026

[CVE-2025-69139] Unauthenticated Arbitrary File Deletion in Car Zone <= 3.7 versions.

Unauthenticated Arbitrary File Deletion in Car Zone

nvdaltovulnerabilidad CVSS 8.6 NVD