Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers Password Generator VPN PSK Generator
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV Vigía LATAM
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
24,658
Total alertas
5025
Críticas
18870
Altas
8
Ransomware
2795
Esta semana
RSS
vulnerabilidad × Limpiar todo ×
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-61568] `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expos…
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a victim's local MCP listener while preserving an attacker-controlled `Host` and `Origin`. The server accepts those headers and reaches the MCP in…
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-66887] The affected products are missing authorization on state-changing CGIs and session checks are not pe…
The affected products are missing authorization on state-changing CGIs and session checks are not performed.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-54544] Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints…
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @login_required decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare server to issue an arbitrary HTTP POST to any URL the attacker supplies, including internal network ad…
nvdaltovulnerabilidad CVSS 7.2 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-54337] Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injec…
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overwrite system files. Version 1.6.14 fixes the issue.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-89040] Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a cr…
Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-88975] Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTTP/2 read l…
Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTTP/2 read loop parses a frame’s 24-bit declared length but waits to buffer the entire payload before comparing it with SETTINGS_MAX_FRAME_SIZE. An unauthenticated peer can declare a payload near 16 MiB on a connection where Ember advertised 16 KiB and either complete or slowly stream it, causing up to 1024-fol…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87286] Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported…
Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks of this vulnerability can result in takeover of Oracle GraalVM. CVSS 3.1 Base Score 8.1 (Confidenti…
nvdaltovulnerabilidad CVSS 8.1 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87287] Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported…
Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks of this vulnerability can result in takeover of Oracle GraalVM. CVSS 3.1 Base Score 8.1 (Confidenti…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87288] Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported…
Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks of this vulnerability can result in takeover of Oracle GraalVM. CVSS 3.1 Base Score 8.1 (Confidenti…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87289] Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-stati…
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatabl…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87273] Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The …
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker …
nvdaltovulnerabilidad CVSS 8.6 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87276] Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The …
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87277] Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The …
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87264] Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Inte…
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significan…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87265] Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). …
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to c…
nvdaltovulnerabilidad CVSS 8.1 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87266] Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server)…
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all O…
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87268] Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The …
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM Virtual…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87269] Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The …
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM Virtual…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87270] Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The …
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM Virtual…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87271] Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The …
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM Virtual…
nvdaltovulnerabilidad CVSS 7.8 NVD