Alertas de Seguridad de la Información

M Alto vulnerabilidad

12/07/2026

[CVE-2026-15484] A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function su…

A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation results in buffer overflow. It is possible to launch the attack remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. …

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-15482] A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unknown proces…

A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unknown processing of the file /azcall/adm/gestao_loja/sis.php?t=consultar of the component HTTP Handler. Executing a manipulation of the argument nome/perfil/status can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-15483] A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function …

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation of the argument nslookup_target leads to buffer overflow. It is possible to initiate the attack remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-15480] A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start…

A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such manipulation of the argument device_name leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor explains: "We are unable to confirm if the vulnerability …

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-15481] A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects…

A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_test of the file /sbin/rc of the component IPoA WAN Connection Setup. Performing a manipulation of the argument ipoa_ipaddr results in command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

12/07/2026

[CVE-2026-15479] A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function chang…

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function change_passwd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early ab…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

11/07/2026

[CVE-2026-61442] PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on t…

PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for projects, issues, and agents, which only require workspace-member role. A workspace member can modify owner-created records; for projects, a member can reassign lead_id to their own user id and then delete the owner-created project, bypassing the delete route's owner/admin permis…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Crítico vulnerabilidad

11/07/2026

[CVE-2026-61445] PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the A…

PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation and command sanitization in LLM tool calls. Attackers can inject malicious prompts through the chat interface to write files to arbitrary filesystem locations and execute arbitrary shell commands with root privileges.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad

11/07/2026

[CVE-2026-61447] PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python(…

PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through prompt injection to exfiltrate all environment secrets and execute arbitrary code on the host system.

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Crítico vulnerabilidad

11/07/2026

[CVE-2026-60090] PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector a…

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value (declared as int but not enforced at runtime) is interpolated directly into the vector column of the generated CREATE TABLE DDL. A caller able to i…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

11/07/2026

[CVE-2026-61426] PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with …

PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requirement and wildcard CORS. Unauthenticated attackers can call GET /api/agents to read agent instructions and system prompts, or POST /api/chat to invoke agents without authentication.

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

11/07/2026

[CVE-2026-61428] PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing una…

PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject messages with spoofed sender addresses. Attackers can POST crafted message.received events to the webhook endpoint to inject arbitrary content into the agent and trigger replies to attacker-controlled addresses, bypassing sender allow/block lists.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

11/07/2026

[CVE-2026-61429] PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI…

PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass SSRF validation by exploiting DNS rebinding and HTTP redirects. Attackers can craft URLs that resolve to internal services after the initial validation check, enabling the headless browser to follow redirects and read internal responses including sen…

nvdaltovulnerabilidad CVSS 8.5 NVD

M Alto vulnerabilidad

11/07/2026

[CVE-2026-61439] PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block…

PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity, allowing HIGH-level threats to pass through unblocked. Attackers can submit single-vector prompt injection attacks such as instruction overrides or financial manipulation that trigger HIGH severity detection but are logged without blocking, enabling system p…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

11/07/2026

[CVE-2026-56303] Capgo before 12.128.2 contains an information disclosure vulnerability in the find_apikey_by_value P…

Capgo before 12.128.2 contains an information disclosure vulnerability in the find_apikey_by_value PostgreSQL function marked SECURITY DEFINER and executable by the anon role. Unauthenticated attackers can call this function via the /rest/v1/rpc/find_apikey_by_value endpoint to retrieve sensitive API key metadata including user_id, mode, org scoping, and expiration details when supplied a valid ke…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

11/07/2026

[CVE-2026-1359] The Genolve – AI image AI video generation plugin for WordPress is vulnerable to unauthorized modifi…

The Genolve – AI image AI video generation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the genolve_setOpt() function in all versions up to, and including, 5.0.5. This makes it possible for authenticated attackers, with Contributor-level access and above, to update arbitrary WordPress options, including enabling user registration and …

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

11/07/2026

[CVE-2026-9282] The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, …

The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.4 via the setupSources function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Exploitation requires enabling manual minify mode and supplying a manual-format minify filename so …

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

11/07/2026

[CVE-2026-15155] The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is v…

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Authenticated Account Takeover via Email Header Injection in all versions up to, and including, 6.6.10 This is due to insufficient server-side validation of a Login/Register widget setting used to construct outgoing email headers — the allowed-values restriction is enforced only in the …

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

11/07/2026

[CVE-2026-4661] The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to…

The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'fildname' parameter in all versions up to, and including, 2.2.2. This is due to insufficient escaping of user-supplied column names in the ajaxCheck() method and lack of preparation in the $wpdb->update() call. The vulnerability is compounded by the complete …

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

11/07/2026

[CVE-2026-6939] The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site Sc…

The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'approval_code' parameter in all versions up to, and including, 2.7.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.…

nvdaltovulnerabilidad CVSS 7.2 NVD