Alertas de Seguridad de la Información

A Crítico vulnerabilidad

04/06/2026

[CVE-2026-50208] High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-cod…

High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-coded DES symmetric encryption keys, a Man-in-the-Middle (MITM) actor could decrypt network traffic.

nvdcriticovulnerabilidad CVSS 9.4 NVD

A Crítico vulnerabilidad

04/06/2026

[CVE-2026-50211] Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail buil…

Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malicious apps write privileges to internal NVRAM registers.

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

04/06/2026

[CVE-2026-49191] The production build of the M3WebServer hard-codes its backend API keys, which can be easily interce…

The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages.

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

04/06/2026

[CVE-2026-49188] The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), …

The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for unauthenticated users to execute arbitrary root commands.

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

04/06/2026

[CVE-2026-49185] The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing…

The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction injection.

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

04/06/2026

[CVE-2026-49186] The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any clie…

The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any client to subscribe using wildcard characters (# or +) to enumerate hidden network devices or publish rogue control commands.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

04/06/2026

[CVE-2026-41283] OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. The…

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.

nvdcriticovulnerabilidad CVSS 9.9 NVD

L Crítico vulnerabilidad

03/06/2026

[CVE-2026-46266] In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO…

In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Yizhou Zhao reported that simply having one RAW socket on protocol IPPROTO_RAW (255) was dangerous. socket(AF_INET, SOCK_RAW, 255); A malicious incoming ICMP packet can set the protocol field to 255 and match this socket, leading to FNHE cache changes. inner = IP(s…

nvdcriticovulnerabilidad CVSS 9.1 NVD

L Crítico vulnerabilidad

03/06/2026

[CVE-2026-46244] In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 …

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In nft_inner_parse_l2l3(), when processing inner IPv6 packets, ipv6_find_hdr() correctly computes the transport header offset traversing all extension headers, but the result is immediately overwritten with nhoff + sizeof(_ip6h) (40 bytes), which only accounts for the IPv6 base h…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

03/06/2026

[CVE-2026-36748] RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media link…

RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.

nvdcriticovulnerabilidad CVSS 9.0 NVD

M Crítico vulnerabilidad

03/06/2026

[CVE-2026-36576] An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up …

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.

nvdcriticovulnerabilidad CVSS 9.8 NVD

H Crítico vulnerabilidad

03/06/2026

[CVE-2026-5241] A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows…

A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the `trust_remote_code` parameter, intended to prevent remote code execution, is overridden by untrusted serialized configuration data in a nested code path. Specifically, when lo…

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Crítico vulnerabilidad

03/06/2026

[CVE-2026-35075] An unauthenticated remote attacker can recover a default, hard coded password from a firmware image …

An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

03/06/2026

[CVE-2026-47065] ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Pro…

ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully addressed. When the serialised stream contains a TC_PROXYCLASSDESC (the marker for a java.lang.reflect.Proxy ), JDK’s ObjectInputStream.readProxyDesc() is dispatched. JDK then calls the default ObjectInputStream.resolveProxyClass(interfaces) implementation, which perform…

nvdcriticovulnerabilidad CVSS 9.8 NVD

A Crítico vulnerabilidad

03/06/2026

[CVE-2025-14771] Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue aff…

Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

nvdcriticovulnerabilidad CVSS 9.9 NVD

L Crítico vulnerabilidad

02/06/2026

[CVE-2026-32625] LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and in…

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the Model Context Protocol (MCP) server integration resolves ${VAR} placeholders against the server's process.env during Zod schema validation of user-supplied MCP server URLs. Any authenticated user can create a malicious MCP server configuration with a URL pointing to an attacker-co…

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

02/06/2026

[CVE-2026-49448] authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, …

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by sending an empty POST. This issue has been patched in versions 2025.12.6, 2026.2.4, and 2026.5.1.

nvdcriticovulnerabilidad CVSS 9.8 NVD

G Crítico vulnerabilidad

02/06/2026

[CVE-2026-42849] authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the …

authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE (Simple Flow Executor) in order to make the interface more compatible with legacy browsers, it was possible to use an XSS exploit in the AutosubmitStage. This issue has been patched in versions 2025.12.5 and 2026.2.3.

nvdcriticovulnerabilidad CVSS 9.3 NVD

M Crítico vulnerabilidad

02/06/2026

[CVE-2026-5076] The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in a…

The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of the password reset key in the `arm_reset_password_key` user meta field when a user requests a password reset. This is in addition to the hashed key that WordPress core stores securely in `wp_users.user_activation_key`. Th…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

02/06/2026

[CVE-2026-38967] CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response…

CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.

nvdcriticovulnerabilidad CVSS 9.8 NVD