Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,841
Total alertas
4833
Críticas
17354
Altas
8
Ransomware
1367
Esta semana
RSS
nvd × 30 días × Limpiar todo ×
M Alto vulnerabilidad
18/09/2026
[CVE-2026-63419] OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format…
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A zbuffer-only tiled iff is exposed with a 16-bit public imagespec while the decoder retains a 32-bit internal pixel size. iffinput::read_native_tile() copies according to m_header.pixel_bytes() rather than imagespec::tile…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2026-63422] OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format…
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A valid tiled openexr image whose width is not a multiple of its tile width can trigger an overflow when a caller reads a partial edge-tile rectangle. openexrinput::read_native_tiles() copies each row into the caller buffe…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2026-54148] http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0…
http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvider.verify in http4k-security-digest does not compare the uri parameter in an Authorization: Digest response with the actual request URL. An attacker who captures a valid Digest authentication response can replay it against another URL served by the same realm, bypassing the per-r…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2026-10853] IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or pot…
IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
18/09/2026
[CVE-2026-10858] IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denia…
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages.
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2026-11375] IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb…
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2026-11378] IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb…
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing.
nvdaltovulnerabilidad CVSS 8.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
18/09/2026
[CVE-2026-11381] IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb…
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2026-10030] IBM MQ Console allows authenticated non-administrative users to create and start queue managers due …
IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2026-10575] IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate pr…
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with malformed distribution headers.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2026-10744] IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denia…
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer overflow in MQINQ request validation.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
18/09/2026
[CVE-2026-10747] IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute a…
IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication.
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2026-10751] IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code…
IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
18/09/2026
[CVE-2025-53837] XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki sy…
XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write …
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2025-61682] Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query dat…
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Versions starting in 3.1.0 and prior to 7.0.0 insert the unsanitized value of a data attribute into the DOM as HTML, allowing for stored XSS through wikitext. Version 7.0.0 patches the issue.
nvdaltovulnerabilidad CVSS 8.6 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
18/09/2026
[CVE-2026-10027] IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a…
IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malformed compressed data on channels configured with compression enabled.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2025-14753] IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An…
IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2025-14754] IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with el…
IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
18/09/2026
[CVE-2025-15399] IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 …
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Alto vulnerabilidad
18/09/2026
[CVE-2026-93657] hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Reso…
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and Resolver::lookup_ip() APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged DNS records accepted as validated, bypassing DNSSEC authentication checks.
nvdaltovulnerabilidad CVSS 7.5 NVD