Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,434
Total alertas
3054
Críticas
10108
Altas
8
Ransomware
1778
Esta semana
RSS
cwe-59 × 30 días × Limpiar todo ×
M Crítico vulnerabilidad
12/08/2026
[CVE-2026-63294] A link following vulnerability in LXD allows an attacker to achieve root command execution on the ho…
A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image or backup archives, LXD fails to properly validate and confine the backup.yaml file when it exists as a symbolic link. An attacker can exploit this flaw by providing a malicious archive with a symlinked backup.yaml file, causing LXD to proce…
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-62832] Improper link resolution before file access ('link following') in Windows User Profile Service allow…
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-62812] Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth…
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-62803] Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth…
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-62807] Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth…
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-62776] Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth…
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-62761] Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth…
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
11/08/2026
[CVE-2026-61358] Improper link resolution before file access ('link following') in Windows Accessibility Infrastructu…
Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-72694] A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops priv…
A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link (symlink) following vulnerability. By influencing or pre-placing a symlink in the process ID (PID) file path, the attacker can trick the root process into changing the ownership of an arbitrary existing file to the daemon user. Thi…
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
10/08/2026
[CVE-2026-63622] A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm…
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-level libvirt daemon into changing the ownership of an arbitrary file to the `swtpm` user. This allows for …
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
07/08/2026
[CVE-2026-71556] go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alp…
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause go-git to read from or write to files outside the intended working …
nvdaltovulnerabilidad CVSS 7.1 NVD
M Crítico vulnerabilidad
05/08/2026
[CVE-2026-20310] As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst …
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20310 are related to improper link resolution before file access…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Alto vulnerabilidad
05/08/2026
[CVE-2026-12410] Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows …
Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation, which CCleaner follows when deleting the application's data folder with elevated integrity.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
29/07/2026
[CVE-2026-13268] G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This v…
G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Backup Service. By…
nvdaltovulnerabilidad CVSS 7.8 NVD