Alertas de Seguridad de la Información

F Crítico vulnerabilidad

20/07/2026

[CVE-2026-64620] FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common…

FreeRDP before 3.28.0 (affected

nvdcriticovulnerabilidad CVSS 9.8 NVD

F Alto vulnerabilidad

20/07/2026

[CVE-2026-64621] FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_…

FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_file_apply_to_settings() (client/common/file.c) when parsing the selectedmonitors field of a .rdp connection file. The MonitorIds array is allocated through the settings object, and a raw non-owning pointer to it is freed on the strtoul error path without clearing settings->MonitorIds, le…

nvdaltovulnerabilidad CVSS 7.3 NVD

S Alto vulnerabilidad

20/07/2026

[CVE-2026-63756] SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condition in the HTTP /rpc …

SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condition in the HTTP /rpc endpoint that allows unauthenticated requests to inherit authenticated session state. Unauthenticated attackers can send concurrent requests to the /rpc endpoint while legitimate authenticated traffic is active to execute operations with hijacked user privileges.

nvdaltovulnerabilidad CVSS 8.1 NVD

S Alto vulnerabilidad

20/07/2026

[CVE-2026-63757] SurrealDB versions before 3.1.0 contain a session hijacking vulnerability where the HTTP /rpc sessio…

SurrealDB versions before 3.1.0 contain a session hijacking vulnerability where the HTTP /rpc sessions method returns attached session UUIDs without authentication and accepts arbitrary session fields with no ownership verification. Unauthenticated attackers can enumerate session UUIDs and impersonate authenticated sessions to read, write, delete data and escalate privileges.

nvdaltovulnerabilidad CVSS 8.8 NVD

S Alto vulnerabilidad

20/07/2026

[CVE-2026-63747] SurrealDB versions before 3.1.0 contain a denial of service vulnerability in the RPC use handler tha…

SurrealDB versions before 3.1.0 contain a denial of service vulnerability in the RPC use handler that panics when db is set without a namespace. Unauthenticated attackers can send a malformed WebSocket message to the /rpc endpoint to crash the server process.

nvdaltovulnerabilidad CVSS 7.5 NVD

S Alto vulnerabilidad

20/07/2026

[CVE-2026-63739] SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper f…

SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper filter that allows database users with EDITOR or OWNER roles to read files accessible to the SurrealDB process. Attackers can specify arbitrary file paths in the mapper filter and retrieve file contents through query error messages when the SURREAL_FILE_ALLOWLIST is empty or not configured.

nvdaltovulnerabilidad CVSS 7.7 NVD

S Alto vulnerabilidad

20/07/2026

[CVE-2026-63735] SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, …

SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authenticated users to invoke endpoints in different namespaces/databases. Attackers with valid credentials for any namespace/database can access custom API endpoints in other tenants by specifying the target scope in the URL path, reading sensitive data or triggering unintended operations.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-16246] In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a r…

In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2\. Starting with BRAIN2 3.09, the setup no longer executes this tool. However, the optional component Bizerba ScriptService still executes it. Bizerba Sc…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-16247] In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup…

In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this process, existing permissions on %ProgramData% are deleted and replaced, granting the Windows group Everyone full control instead of restricting access to %ProgramData%\Bizerba\_connect.BRAIN or %ProgramData%\Bizerba\BCT. Starting with _connect.BRAIN 5.06, the setup no longer …

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-14448] An high privileged remote attacker can exploit an authenticated OS command injection vulnerability i…

An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the system_certificates view due to improper neutralization of special elements in an OS command. This can result in a total loss of confidentiality, availability and integrity.

nvdaltovulnerabilidad CVSS 7.2 NVD

M Crítico vulnerabilidad

20/07/2026

[CVE-2026-16242] A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent…

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy,…

nvdcriticovulnerabilidad CVSS 9.4 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-13577] Dancer2 versions through 2.1.0 for Perl generate insecure session ids when required CSPRNG modules a…

Dancer2 versions through 2.1.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable. Dancer2::Core::Role::SessionFactory::generate_id silently falls back to a built-in rand-derived session id unless both Math::Random::ISAAC::XS and Crypt::URandom are available. The fallback session id is generated from a SHA-1 hash of a call to the built-in rand function, the absol…

nvdaltovulnerabilidad CVSS 8.2 NVD

M Medio vulnerabilidad

20/07/2026

CVE-2026-50324 Windows Active Directory Federation Services Denial of Service Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-50324 Windows Active Directory Federation Services Denial of Service Vulnerability. Tipo: Denegación de Servicio (DoS).

windowsdos Microsoft MSRC

M Alto vulnerabilidad

20/07/2026

CVE-2026-50659 .NET Spoofing Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-50659 .NET Spoofing Vulnerability. Tipo: Suplantación (Spoofing).

dotnetspoofing Microsoft MSRC

M Alto vulnerabilidad

20/07/2026

CVE-2024-35248 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2024-35248 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

eop Microsoft MSRC

M Alto vulnerabilidad

20/07/2026

[CVE-2026-6656] Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The check_passwor…

Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The check_password method uses the built-in eq operator. This allows discrepancies in timing to be used to guess the underlying hash.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-9833] The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does…

The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in the response body served with an HTML content type, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of a logged-in user with `edit_pages` capability (Editor or higher) who is tricked into follow…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Crítico vulnerabilidad

20/07/2026

[CVE-2026-16235] Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These ver…

Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-12970] The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting i…

The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting it into an HTML attribute, leading to Reflected Cross-Site Scripting that executes in the browser of a logged-in instructor or administrator who is tricked into opening a crafted link.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-13142] The Social Login, Passkeys, Magic Link & Email OTP WordPress plugin before 1.4.1 does not enforce r…

The Social Login, Passkeys, Magic Link & Email OTP WordPress plugin before 1.4.1 does not enforce rate limiting or a working attempt lockout on its passwordless email one-time-password verification, and stores the short numeric codes in plaintext, allowing an unauthenticated attacker who knows a registered email address to brute-force the code and log in as that user, including an administrator, …

nvdaltovulnerabilidad CVSS 8.1 NVD