Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "X" — 10395 resultados ✕ Limpiar búsqueda
13,949
Total alertas
3186
Críticas
10491
Altas
8
Ransomware
1113
Esta semana
RSS
D Crítico vulnerabilidad
26/06/2026
[CVE-2026-45408] Dokku is a docker-powered PaaS. Prior to 0.38.2, the app name validation regex (^[a-z0-9][^/:_A-Z]*$…
Dokku is a docker-powered PaaS. Prior to 0.38.2, the app name validation regex (^[a-z0-9][^/:_A-Z]*$) permits shell metacharacters. When an authenticated user pushes to a git remote with a crafted app name, the name is embedded unquoted into a bash pre-receive hook script via an unquoted heredoc (
nvdcriticovulnerabilidad CVSS 9.0 NVD
C Alto vulnerabilidad
26/06/2026
[CVE-2026-9640] A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.…
A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy restrictions by importing a maliciously crafted instance backup containing restricted configuration keys …
nvdaltovulnerabilidad CVSS 7.2 NVD
O Alto vulnerabilidad
26/06/2026
[CVE-2026-5757] Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine al…
Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.
nvdaltovulnerabilidad CVSS 7.5 NVD
D Alto vulnerabilidad
26/06/2026
[CVE-2026-47214] Docling simplifies document processing by parsing diverse formats and providing integrations with th…
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0.
nvdaltovulnerabilidad CVSS 7.1 NVD
C Alto vulnerabilidad
26/06/2026
[CVE-2026-12411] Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrust…
Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device PATCH request over /dev/lxd when security.devlxd.management.volumes is enabled.
nvdaltovulnerabilidad CVSS 8.4 NVD
I Alto vulnerabilidad
26/06/2026
[CVE-2026-21734] A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can tri…
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device. An edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU sha…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Crítico vulnerabilidad
26/06/2026
[CVE-2025-11919] The default JVM can access files and directories under `/tmp/` including the `$TemporaryDirectory` o…
The default JVM can access files and directories under `/tmp/` including the `$TemporaryDirectory` of other users on the same cloud instance (`/tmp/UserTemporaryFiles/`). The `-init` file for the the JVM initialization exists in the vulnerable directory during the startup of the JVM. An attacker with access to the shared `/tmp/` space can preemptively create or replace `.jar` files or directorie…
nvdcriticovulnerabilidad CVSS 9.6 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Crítico vulnerabilidad
26/06/2026
[CVE-2026-0685] Server side template inject (SSTI) in the expression evaluation component in Genshi Template Engine …
Server side template inject (SSTI) in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution (RCE) via crafted template expressions.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-0828] Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.75.0 and 11…
Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.75.0 and 11.11.4.0, allows unprivileged user to abuse IOCTL path and terminate protected system processes.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57631] Administrator SQL Injection in Popup box <= 6.0.1 versions.
Administrator SQL Injection in Popup box
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57325] Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions.
Unauthenticated Cross Site Scripting (XSS) in NanoMag
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57527] Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulner…
Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitrary code execution by embedding a malicious serialized Java object in the javax.faces.ViewState HTTP response parameter. The JSFViewState.decode() method base64-decodes the ViewState value and passes it directly to Objec…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57314] Unauthenticated Cross Site Scripting (XSS) in SureCart <= 4.3.2 versions.
Unauthenticated Cross Site Scripting (XSS) in SureCart
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57315] Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.
Contributor Remote Code Execution (RCE) in Blocksy Companion Pro
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57317] Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments
nvdaltovulnerabilidad CVSS 7.1 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57319] Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions.
Unauthenticated Cross Site Scripting (XSS) in FOX
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57322] Unauthenticated Cross Site Scripting (XSS) in weMail <= 2.1.2 versions.
Unauthenticated Cross Site Scripting (XSS) in weMail
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-56072] Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions.
Unauthenticated Cross Site Scripting (XSS) in WoodMart
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57312] Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions.
Unauthenticated Cross Site Scripting (XSS) in Everest Forms
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-56060] Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 v…
Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce
nvdaltovulnerabilidad CVSS 7.5 NVD