Alertas de Seguridad de la Información

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15545] A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is t…

A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is the function main of the file www/apcupsd/tomatodata.cgi of the component apcupsd. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit is publicly available and might be used. This project is superseded by FreshTomato.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Crítico vulnerabilidad

13/07/2026

[CVE-2026-14453] This vulnerability is a critical Server-Side Template Injection (SSTI) in Centreon's centreon-open-t…

This vulnerability is a critical Server-Side Template Injection (SSTI) in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The message_confirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, to inject and execute arbitrary code on the server. This results in disclosure of environment secrets …

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15544] A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affected is the function getupsvar …

A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affected is the function getupsvar of the file www/apcupsd/tomatodata.cgi of the component apcupsd. This manipulation of the argument Field causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This project is superseded by FreshTomato.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Crítico vulnerabilidad

13/07/2026

[CVE-2026-4769] Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability durin…

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system co…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15541] A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted element is the function Server.…

A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted element is the function Server.Handle of the file app/server/server/server.go of the component Master Websocket Handler. Executing a manipulation of the argument Agent can lead to missing authorization. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15542] A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function of…

A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function of the file app/main.go of the component Websocket Connection Authentication. The manipulation leads to improper authentication. The attack can be initiated remotely. The pull request to fix this issue awaits acceptance.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15543] A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the f…

A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-12582] The Library Management System WordPress plugin before 3.5.8 does not sanitize and escape a user-supp…

The Library Management System WordPress plugin before 3.5.8 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection and extract arbitrary data from the database, including user password hashes.

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15537] A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerabili…

A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

nvdaltovulnerabilidad CVSS 7.3 NVD

C Medio vulnerabilidad

13/07/2026

[CVE-2026-15531] A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b…

A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b2473e3706. Affected by this issue is the function torch.load of the file run_nerf.py of the component Checkpoint File Handler. The manipulation of the argument ckpt_path leads to deserialization. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Th…

check-pointcheckpointmedio CVSS 5.3 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-9492] The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYT…

The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIO_x64.sys bundled with the module, thereby arbitrarily reading and writing physical memory and obtaining kernel-level privileges.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15515] A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects …

A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit has been disclo…

nvdaltovulnerabilidad CVSS 7.0 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15517] A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/…

A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/PlanGiveOut.aspx. This manipulation of the argument httpOID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

13/07/2026

[CVE-2026-15514] A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affec…

A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affects the function RPCService.query of the file /customizemt/xkq/rpc.jsp of the component PHPRPC Remote Call Interface. Executing a manipulation of the argument phprpc_args can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be use…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Crítico vulnerabilidad

12/07/2026

[CVE-2026-15511] A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerabilit…

A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function system_wl_upload_pic_file of the file /usr/bin/webmgnt of the component FastCGI Backend. This manipulation of the argument filename causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor w…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-15506] A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected elemen…

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 10.10.0 is sufficient to fix this issue. You shou…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-61875] luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN c…

luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests. Attackers can send malicious HTML in the NewPortMappingDescription field, which miniupnpd stores and luci-app-upnp renders without output encoding, executing the payload when administrators view the UPnP or Status pages.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-61876] LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allo…

LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup. Attackers can send a DHCPv6 Client FQDN containing script tags that execute in the administrator's browser when viewing DHCP lease pages.

nvdaltovulnerabilidad CVSS 8.8 NVD

K Crítico vulnerabilidad

12/07/2026

[CVE-2026-56260] Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /scr…

Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-traversal values to write to any location writable by the application's user, overwriting server files and causing denial of service.

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-56313] Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prel…

Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that allows enterprise administrators to delete password identities of users in foreign organizations. Attackers with org.update_settings permission and an active SSO provider can call the prelink-users endpoint to permanently remove email-based authentication for any user matching the …

nvdaltovulnerabilidad CVSS 8.1 NVD