Alertas de Seguridad de la Información

M Alto vulnerabilidad

09/06/2026

[CVE-2026-50636] The RemoteControl API methods invite_participants and remind_participants pass a caller-supplied tok…

The RemoteControl API methods invite_participants and remind_participants pass a caller-supplied token-ID array into TokenDynamic::findUninvited(), which concatenates the values directly into a tid IN ('...') SQL clause without parameterization or input validation. A remote, authenticated attacker holding the tokens/update permission on a survey can inject a crafted array element to perform SQL in…

nvdaltovulnerabilidad CVSS 8.8 NVD

O Alto vulnerabilidad

09/06/2026

[CVE-2026-42765] Issue summary: When a partial-chain certificate verification is enabled together with OCSP response …

Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application. When performing OCSP response c…

nvdaltovulnerabilidad CVSS 7.5 NVD

O Alto vulnerabilidad

09/06/2026

[CVE-2026-34181] Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files th…

Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integrity mechanism allowing a certificate and private key forgery. Impact Summary: An attacker impersonating a user can cause a service reading PKCS#12 files to accept forged certificates and private keys with a 1 in 256 probability. If…

nvdaltovulnerabilidad CVSS 7.4 NVD

L Alto vulnerabilidad

09/06/2026

[CVE-2026-46323] In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skb…

In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the source and GRO skb, without checking the zerocopy status, and in particular the SKBFL_MANAGED_FRAG_REFS flag. When SKBFL_MANAGED_FRAG_REFS is set, the skb doesn't hold a reference on the pages in shinfo->frags. Appending those frags to anoth…

nvdaltovulnerabilidad CVSS 7.8 NVD

V Alto vulnerabilidad

09/06/2026

[CVE-2026-41006] Spring HATEOAS's internal PropertyUtils.createObjectFromProperties method, used by the Collection+JS…

Spring HATEOAS's internal PropertyUtils.createObjectFromProperties method, used by the Collection+JSON and UBER media type deserializers, performs bean property binding via reflection without consulting Jackson access-control annotations. Affected versions: Spring HATEOAS 1.5.0 through 1.5.6; 2.3.0 through 2.3.4; 2.4.0 through 2.4.1; 2.5.0 through 2.5.2; 3.0.0 through 3.0.3.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-8795] A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velocir…

A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in client_info.json inside a collection ZIP is inserted into a YAML template via Go's text/template without escaping. An attacker providing a crafted collection ZIP can leverage literal double quotes and newlines in the hostname to break out of the YAM…

nvdaltovulnerabilidad CVSS 7.8 NVD

F Alto vulnerabilidad

09/06/2026

Improper access control in API endpoints

Fortinet PSIRT publica advisory de seguridad: Improper access control in API endpoints. Tipo: Control de Acceso Inadecuado. Producto afectado: Fortiportal.

firewall PAN PSIRT

F Medio vulnerabilidad

09/06/2026

Restricted CLI escape using Lua

Fortinet PSIRT publica advisory de seguridad: Restricted CLI escape using Lua. Tipo: Vulnerabilidad de seguridad. Producto afectado: Fortios.

firewallfortios PAN PSIRT

F Crítico vulnerabilidad

09/06/2026

Second-Order OS Command Injection via JSON Input on start vnc feature

Fortinet PSIRT publica advisory de seguridad: Second-Order OS Command Injection via JSON Input on start vnc feature. Tipo: Inyección de Comandos OS. Producto afectado: Fortisandbox.

firewallfortisandboxcommand-injection PAN PSIRT

M Alto vulnerabilidad

08/06/2026

[CVE-2026-40519] Nginx Proxy Manager versions 2.9.14 through 2.15.1, fixed in commit a5db5ed, contain an authenticate…

Nginx Proxy Manager versions 2.9.14 through 2.15.1, fixed in commit a5db5ed, contain an authenticated remote code execution vulnerability via OS command injection in the setupCertbotPlugins() function in backend/setup.js, allowing attackers with certificates:manage permission to execute arbitrary commands by storing a malicious payload in the dns_provider_credentials field. The user-controlled dns…

nvdaltovulnerabilidad CVSS 7.5 NVD

S Alto vulnerabilidad

08/06/2026

[CVE-2026-46490] samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template su…

samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template substitution only escapes attribute contexts. Values inserted into element text (e.g., ) are not escaped. A normal user can inject XML markup into an attribute value (e.g., email, name) and add new elements inside the signed assertion. The IdP then signs the tampe…

nvdaltovulnerabilidad CVSS 8.8 NVD

F Crítico vulnerabilidad

08/06/2026

[CVE-2026-46441] Flowise is a drag & drop user interface to build a customized large language model flow. Prior to ve…

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the assistant update endpoint of FlowiseAI. The endpoint allows authenticated users to modify server-controlled properties such as workspaceId, createdDate, and updatedDate when updating an assistant resource. Due to missing server-side validati…

nvdcriticovulnerabilidad CVSS 9.6 NVD

F Crítico vulnerabilidad

08/06/2026

[CVE-2026-42861] Flowise is a drag & drop user interface to build a customized large language model flow. Prior to ve…

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the variable update endpoint of FlowiseAI. The endpoint allows authenticated users to modify server-controlled properties such as workspaceId, createdDate, and updatedDate when updating a variable resource. Due to missing server-side validation …

nvdcriticovulnerabilidad CVSS 9.6 NVD

F Alto vulnerabilidad

08/06/2026

[CVE-2026-42863] Flowise is a drag & drop user interface to build a customized large language model flow. Prior to ve…

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the chatflow update endpoint of FlowiseAI. The endpoint allows clients to modify server-controlled properties such as deployed, isPublic, workspaceId, createdDate, and updatedDate when updating a chatflow object. Due to missing server-side valid…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

08/06/2026

[CVE-2026-50752] A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an una…

A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.

nvdaltovulnerabilidad CVSS 7.4 NVD

B Crítico vulnerabilidad

05/06/2026

[CVE-2026-45777] OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 a…

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remotely execute arbitrary system commands on the web server hosting Open XDMoD with the privileges of the web server process. This could allow an attacker to read or modify application data, alter system configuration, or disrupt service availability. All…

nvdcriticovulnerabilidad CVSS 9.8 NVD

T Alto vulnerabilidad

05/06/2026

[CVE-2026-45745] Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa…

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Starting in version 1.7.0, Termix Desktop (Electron) disables TLS certificate validation, allowing a machine-in-the-middle attacker to intercept and modify HTTPS traffic to the configured Termix server. This can lead to credential theft and JWT/session theft during login and normal use. As…

nvdaltovulnerabilidad CVSS 8.0 NVD

M Alto vulnerabilidad

05/06/2026

[CVE-2026-50232] Lyrion Music Server 9.2.0 contains a stored cross-site scripting vulnerability that allows attackers…

Lyrion Music Server 9.2.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through media file metadata tags like GENRE, ARTIST, and ALBUM. Attackers can craft files with XSS payloads in metadata tags that execute in the web interface when users view track information or play files, enabling access to management functions and settings disclosure…

nvdaltovulnerabilidad CVSS 7.2 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11120] Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7…

Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

F Alto vulnerabilidad

04/06/2026

[CVE-2026-50292] In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can …

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

nvdaltovulnerabilidad CVSS 7.4 NVD