Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers Password Generator VPN PSK Generator
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV Vigía LATAM
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Multiple Vendors" — 19142 resultados ✕ Limpiar búsqueda
24,831
Total alertas
5047
Críticas
19009
Altas
8
Ransomware
2847
Esta semana
RSS
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76680] Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenti…
Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF) attacks. A successful exploit allows an attacker to enumerate information about the internal structure of the EdgeConnect SD-WAN Orchestrator host leading to potential disclosure of sensitive information beyond what is authorize…
nvdaltovulnerabilidad CVSS 8.5 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-76669] Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestra…
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-76670] Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestra…
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-76672] A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configu…
A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint. Successful exploitation could result in the disclosure of sensitive third-party API tokens and credentials, po…
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73959] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Compose…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. C…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73960] Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren …
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren Server). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-73961] Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). …
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper. CVSS 3.1 Base Sco…
nvdcriticovulnerabilidad CVSS 9.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-73962] Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic…
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impa…
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-73963] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter …
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73966] Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). S…
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 7.2…
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73949] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter P…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-73950] Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic…
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Ma…
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73951] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCente…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-73952] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized creation, delet…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-73953] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter …
nvdcriticovulnerabilidad CVSS 9.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73954] Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi…
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterp…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73955] Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Char…
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Charting). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful at…
nvdaltovulnerabilidad CVSS 7.3 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-73956] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Compose…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. …
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-73957] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks require human interaction from a person other than the attacker a…
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-73958] Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic…
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access …
nvdaltovulnerabilidad CVSS 8.1 NVD