Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,434
Total alertas
3054
Críticas
10108
Altas
8
Ransomware
1778
Esta semana
RSS
cwe-862 × Limpiar todo ×
G Alto vulnerabilidad
17/06/2026
[CVE-2026-28615] In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions byp…
In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Crítico vulnerabilidad
17/06/2026
[CVE-2026-24611] Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions.
Unauthenticated Broken Access Control in MetForm Pro
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2026-22343] Unauthenticated Broken Access Control in WordPress Dating Theme <= 11.2.0 versions.
Unauthenticated Broken Access Control in WordPress Dating Theme
nvdaltovulnerabilidad CVSS 8.6 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0071] In SettingsLib, there is a possible missing permission check due to a logic error in the code. This …
In SettingsLib, there is a possible missing permission check due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0081] In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could …
In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69103] Subscriber Arbitrary Content Deletion in Brikk <= 3.0.0 versions.
Subscriber Arbitrary Content Deletion in Brikk
nvdaltovulnerabilidad CVSS 7.5 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2025-48640] In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing…
In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 8.0 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
G Alto vulnerabilidad
17/06/2026
[CVE-2025-48617] In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a …
In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2024-32949] Missing Authorization vulnerability in Prince Integrate Google Drive allows Exploiting Incorrectly C…
Missing Authorization vulnerability in Prince Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Integrate Google Drive: from n/a through 1.3.8.
nvdaltovulnerabilidad CVSS 8.3 NVD
G Alto vulnerabilidad
16/06/2026
[CVE-2026-0133] In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootc…
In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
O Alto vulnerabilidad
16/06/2026
[CVE-2026-53866] OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing…
OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing that allows authenticated operators to execute unapproved commands. A command request using shell inline-command forms could route through a parser case missing the expected allowlist decision, enabling shell content execution without intended approval prompts.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-39490] Unauthenticated Broken Access Control in JupiterX Core <= 4.14.1 versions.
Unauthenticated Broken Access Control in JupiterX Core
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-52711] Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions.
Unauthenticated Broken Access Control in WooCommerce POS
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2025-68045] Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.12 versions.
Unauthenticated Broken Access Control in WP Event SOlution
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-49065] Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce <= 1.9.5 versions.
Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce
nvdaltovulnerabilidad CVSS 8.2 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
15/06/2026
[CVE-2026-49070] Unauthenticated Broken Access Control in Knit Pay <= 9.4.0.0 versions.
Unauthenticated Broken Access Control in Knit Pay
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
15/06/2026
[CVE-2026-48881] Unauthenticated Broken Access Control in TrueBooker <= 1.1.9 versions.
Unauthenticated Broken Access Control in TrueBooker
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-48883] Unauthenticated Broken Access Control in WPC Product Bundles for WooCommerce <= 8.5.3 versions.
Unauthenticated Broken Access Control in WPC Product Bundles for WooCommerce
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-48873] Unauthenticated Broken Access Control in Montonio for WooCommerce <= 10.1.2 versions.
Unauthenticated Broken Access Control in Montonio for WooCommerce
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-48835] Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 versions.
Unauthenticated Broken Access Control in Contact Form by WPForms
nvdaltovulnerabilidad CVSS 7.5 NVD