Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,298
Total alertas
4744
Críticas
16966
Altas
8
Ransomware
1168
Esta semana
RSS
alto × 30 días × Limpiar todo ×
M Alto vulnerabilidad
14/09/2026
[CVE-2026-84553] A resource exhaustion issue was addressed with improved input validation. This issue is fixed in mac…
A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause a denial-of-service.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-84505] An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac…
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-65362] This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Se…
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-65364] An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Gold…
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause unexpected system termination.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-64701] A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia…
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-64712] This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Se…
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-53714] Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based…
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor but no UnaryInterceptor, leaving every unary Fetch RPC unauthenticated. The streaming interceptor also au…
nvdaltovulnerabilidad CVSS 7.4 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
14/09/2026
[CVE-2026-43783] A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A mal…
A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-43786] This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gat…
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-43689] A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and …
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-43691] A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Ga…
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-43692] A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Gold…
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-28960] A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10…
A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-19290] IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allo…
IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-13293] IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3…
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote authenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data.
nvdaltovulnerabilidad CVSS 8.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
14/09/2026
[CVE-2026-13275] IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3…
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 Managed File Transfer could allow an authenticated attacker to read arbitrary files or perform server-side request forgery due to XML external entity injection in reply message processing.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-13285] IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3…
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-13287] IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3…
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-13107] IBM Business Automation Workflow containers and traditional may use programming model artifacts that…
IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
14/09/2026
[CVE-2026-82028] Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-…
Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows authenticated attackers to inject arbitrary SQL by supplying a malicious format query parameter that is interpolated directly into the FROM clause without parameterization or identifier quoting. Attackers with a self-registered account can substitute arbitrary su…
nvdaltovulnerabilidad CVSS 8.8 NVD