Alertas de Seguridad de la Información

M Alto vulnerabilidad

21/08/2026

[CVE-2026-27490] Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are acces…

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being authenticated are protected by a weak 24-bit pseudo-random secret. This issue has been fixed in version 3.2.3.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-30819] Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop has a reflected Cross-S…

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop has a reflected Cross-Site Scripting (XSS) vulnerability in its dashboard revert functionality with the parameter dashboard_id in /pages/ajax.render.php. This issue has been fixed in version 3.2.3.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-30866] Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can ac…

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version 3.2.3.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-27462] Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different respo…

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-63462] Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the shared …

Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the shared OpenAPI validation error path in src/lib/error/bad-data-error.ts passes a raw request value from lodash.get to JSON.stringify in genericErrorMessage and fromOpenApiValidationErrors without guarding stack exhaustion. An unauthenticated attacker can send a roughly 10 KB JSON value nested thousands of …

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-54682] DiscordChatExporter saves Discord chat logs to a file. Prior to 2.47.2, HTML exports generated with …

DiscordChatExporter saves Discord chat logs to a file. Prior to 2.47.2, HTML exports generated with markdown formatting disabled pass attacker-controlled content through FormatMarkdownAsync and FormatEmbedMarkdownAsync in DiscordChatExporter.Core/Exporting/MessageGroupTemplate.cshtml and render it without HTML entity encoding. The affected fields include message.Content, message.ForwardedMessage.C…

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-77234] Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-e…

Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-77235] Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.…

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to version 11.3.1 or later.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-77236] Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might …

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-62675] Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prio…

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, multipart POST /v1/sessions accepts an authenticated user's agent bundle and omnigent/server/bundles.py validate_agent_bundle does not reject a tools..callable dotted Python path. omnigent/runner/tool_dispatch.py _resolve_spec_callable imports the specified module and _execute_spec_calla…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-41449] UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerabilit…

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can exploit this vulnerability through crafted evidence inputs, mounted images with hostile filenames, or…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-41450] UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerabilit…

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function where foreach command output lines are substituted directly into command strings via sed without proper escaping before being evaluated with eval. Attackers can exploit this by crafting malicious filenames or artifact definitions containing shell metacharacters s…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-41451] UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerabilit…

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings without escaping before execution via eval. Attackers can inject shell metacharacters such as command substitution syntax or semicolons throug…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-39909] llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE h…

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with attacker-controlled content. Attackers can send RPC requests to trigger re-execution of stored graphs with dangl…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-75933] Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and s…

Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's domain.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-54789] mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x H…

mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of `mod_auth_openidc`. The issue is fixed in version 2.4.19.4 by stopping the scan at the string terminator so a val…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-49114] In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the…

In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_data location field and opens it for writing without 'O_NOFOLLOW/O_EXCL', after a non-atomic 'os.path.isfile()' check. A local attacker with write access to the directory where a victim serializes external data can deterministically pre-plant a symlink that is being followed, causi…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Crítico vulnerabilidad

21/08/2026

[CVE-2026-77087] Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attack…

Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated API requests and execute commands through the process adapter.

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Alto vulnerabilidad

21/08/2026

[CVE-2026-77814] is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent direct…

is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswith(parent_path), without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the comparison, so where /data/images is allowed a request for /data/images_private/secret.txt is treated as trusted and served by FileResponse, di…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

21/08/2026

[CVE-2026-62867] Incus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation…

Incus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of user-provided `block.create_options` in storage volume configuration leads to argument injection in the constructed filesystem creation command line. This allows a project-scoped user to inject arbitrary arguments into the binary executed as root. Version 7.3.0 patches the issue.

nvdcriticovulnerabilidad CVSS 9.9 NVD