Alertas de Seguridad de la Información

M Alto vulnerabilidad

30/09/2026

[CVE-2026-103432] apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch…

apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to CVE-2026-15544.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

30/09/2026

[CVE-2026-92870] A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated …

A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

29/09/2026

[CVE-2026-102302] Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute a…

Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

M Crítico vulnerabilidad

29/09/2026

[CVE-2026-101354] A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. The affected element is the fun…

A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. The affected element is the function _tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The exploit has been released to the public and may be used for attacks. The vendor was contacted early ab…

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Crítico vulnerabilidad

28/09/2026

[CVE-2026-101081] A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function…

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the file menu_nat_more.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

28/09/2026

[CVE-2026-101074] A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function pa…

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

28/09/2026

Vulnerabilidad crítica de desbordamiento de buffer en FAST FAC1200R 5.0

Se identificó una vulnerabilidad de desbordamiento de búfer basado en pila (CVSS 9.9) en el analizador MmtAtePrase del dispositivo FAST FAC1200R versión 5.0_20201119_1.0.2, permitiendo explotación remota sin autenticación. El exploit se encuentra públicamente disponible y el fabricante no ha respondido a notificaciones previas. Esta vulnerabilidad afecta principalmente a empresas de telecomunicaciones, ISPs y proveedores de servicios en México y LATAM que utilizan equipos FAST en infraestructuras críticas.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad

28/09/2026

Vulnerabilidad crítica en FAST FAC1900R 20190827_2.0.2 permite desbordamiento de búfer remoto

Se identificó un desbordamiento de búfer basado en pila (stack-based buffer overflow) en la función copy_msg_element del servicio devdiscover de FAST FAC1900R versión 20190827_2.0.2. La vulnerabilidad permite ejecución remota de código sin autenticación (CVSS 10.0) y cuenta con exploits públicamente disponibles. El fabricante no ha respondido a reportes de divulgación responsable, elevando el riesgo inmediato para infraestructuras que dependan de este dispositivo en centros de datos y operaciones críticas de LATAM.

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Crítico vulnerabilidad

28/09/2026

Vulnerabilidad crítica de desbordamiento de búfer en FAST FAC1200R 5.0

Se ha identificado un desbordamiento de búfer basado en pila (stack-based buffer overflow) en la función parse_advertisement_frame del servicio devdiscover del dispositivo FAST FAC1200R versión 5.0_20201119_1.0.2, con puntuación CVSS 9.9. La vulnerabilidad puede ser explotada remotamente sin autenticación, permitiendo ejecución de código arbitrario en routers empresariales y de pequeños negocios ampliamente desplegados en México y Latinoamérica. El exploit es público y el fabricante no ha respondido a solicitudes de parche.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Alto vulnerabilidad

28/09/2026

Vulnerabilidad de desbordamiento de búfer en productos Wi-Fi BUFFALO permite denegación de servicio

Existe una vulnerabilidad de desbordamiento de búfer basado en pila en equipos Wi-Fi BUFFALO que permite a un atacante no autenticado enviar solicitudes HTTP especialmente diseñadas para provocar una denegación de servicio (DoS). Esta vulnerabilidad afecta principalmente a pequeñas y medianas empresas en LATAM que utilizan routers y puntos de acceso BUFFALO en sus infraestructuras de red corporativa e ISP.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

28/09/2026

[CVE-2026-100908] A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the compo…

A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

24/09/2026

[CVE-2026-58008] Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of I…

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

24/09/2026

[CVE-2026-13465] Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of I…

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

23/09/2026

[CVE-2026-96257] A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function…

A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Alto vulnerabilidad

22/09/2026

[CVE-2026-83962] Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result i…

Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

22/09/2026

[CVE-2026-75676] Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary cod…

Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

22/09/2026

[CVE-2026-85279] Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack b…

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in PluginsManager::loadPluginFromPath in PowerEditor/src/MISC/PluginsManager/PluginsManager.cpp because the plugin-supplied GetLexerCount() result controls a loop that writes to containers[30] without enforcing NB_MAX_EXTERNAL_LANG. A malicious or compromised plugin that reports more …

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

22/09/2026

[CVE-2026-86054] Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack b…

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in NppParameters::writeSession in PowerEditor/src/Parameters.cpp because it copies a session path derived from -settingsDir= into backupPathName[MAX_PATH] with unbounded wcscpy and appends SESSION_BACKUP_EXT with unbounded wcscat. A sufficiently long settings directory causes the back…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Crítico vulnerabilidad

22/09/2026

[CVE-2026-80146] Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmwa…

Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authenticated attackers to potentially execute arbitrary code by exploiting an undocumented mfc eeprom read command that copies unbounded user input into a bounded stack buffer before passing it to …

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad

22/09/2026

[CVE-2026-80147] Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmwa…

Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authenticated attackers to potentially execute arbitrary code by exploiting an undocumented mfc eeprom write command that copies unbounded user input into a bounded stack buffer before passing it to…

nvdcriticovulnerabilidad CVSS 9.9 NVD