Alertas de Seguridad de la Información

M Alto vulnerabilidad

22/06/2026

[CVE-2025-66389] GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval…

GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

22/06/2026

[CVE-2026-12581] EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unauthenticated remote a…

EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unauthenticated remote attackers replace a specific session ID for a user, they can gain the user's privilege once the user logs in.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

22/06/2026

[CVE-2023-45796] A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 a…

A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to and including 2.0.33992 allows a low-privileged remote unauthenticated attacker to manipulate process data with potential impact on integrity and/or availability.

nvdaltovulnerabilidad CVSS 8.1 NVD

A Alto vulnerabilidad

22/06/2026

[CVE-2026-44914] Apache NiFi 1.12.0 through 2.9.0 are missing authorization when replacing Process Groups that includ…

Apache NiFi 1.12.0 through 2.9.0 are missing authorization when replacing Process Groups that include extension components with specific Required Permissions based on the Restricted annotation. The Restricted annotation indicates additional privileges required, but framework authorization did not check restricted status when handling requests to replace Process Groups. The missing authorization pe…

nvdaltovulnerabilidad CVSS 7.2 NVD

A Alto vulnerabilidad

22/06/2026

[CVE-2025-66336] Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-cont…

Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly interpolated into a SQL query, and the query is executed without passing the caller's authorization context. This may allow an authenticated attacker, or an anonymous attacker if authentication is disabled, to bypass SQL security validation and access metadata outsid…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

22/06/2026

[CVE-2026-6858] The Transbank Webpay WordPress plugin before 1.14.0 does not sanitize and escape logs to be displaye…

The Transbank Webpay WordPress plugin before 1.14.0 does not sanitize and escape logs to be displayed, allowing unauthenticated users to perform Stored XSS attacks against logged in administrator

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

21/06/2026

[CVE-2026-12806] A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function for…

A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. The manipulation of the argument selSSID leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early ab…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Crítico vulnerabilidad

21/06/2026

[CVE-2026-56395] SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace…

SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious package authors to inject arbitrary HTML and JavaScript. Attackers can achieve remote code execution on any user browsing the Bazaar by embedding XSS payloads in package displayName, description, or README fields, exploiting Electron's nodeIntegration setting to execute OS comma…

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Crítico vulnerabilidad

21/06/2026

[CVE-2026-56397] SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace…

SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious package authors to inject arbitrary HTML and JavaScript. Attackers can achieve remote code execution on any user browsing the Bazaar by embedding XSS payloads in package displayName, description, or README fields, exploiting Electron's nodeIntegration setting to execute OS comma…

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Alto vulnerabilidad

21/06/2026

[CVE-2026-56382] Craft CMS (composer package craftcms/cms) versions >= 5.5.0 and <= 5.9.13 contain a remote code exec…

Craft CMS (composer package craftcms/cms) versions >= 5.5.0 and

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

21/06/2026

[CVE-2026-56239] Capgo before 12.128.2 contains a potential privilege escalation vulnerability in the public.apply_us…

Capgo before 12.128.2 contains a potential privilege escalation vulnerability in the public.apply_usage_overage SECURITY DEFINER function, which performs sensitive billing operations without enforcing internal authorization checks (no validation of auth.uid(), org membership, or check_min_rights). Because the function runs with the owner's privileges, it bypasses Row Level Security. If EXECUTE per…

nvdaltovulnerabilidad CVSS 7.6 NVD

M Alto vulnerabilidad

21/06/2026

[CVE-2026-56242] Capgo before 12.128.2 contains an unauthenticated security definer RPC function get_identity_apikey_…

Capgo before 12.128.2 contains an unauthenticated security definer RPC function get_identity_apikey_only that returns the owning user_id for supplied API keys, creating an API key validity oracle and user identity disclosure primitive. Attackers can call this endpoint with valid or invalid API keys to confirm key validity and map keys to user identifiers, then chain results into other exposed RPCs…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

21/06/2026

[CVE-2025-71357] picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterp…

picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

21/06/2026

[CVE-2025-71378] picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce method…

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load().

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

21/06/2026

[CVE-2025-71348] picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_modu…

picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle files embedding arbitrary code that evades detection but executes during pickle.load, enabling remote code execution in supply chain attacks.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

21/06/2026

[CVE-2026-12786] A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this i…

A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

21/06/2026

[CVE-2026-12795] A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps…

A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosu…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

21/06/2026

[CVE-2026-12782] A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is a…

A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is an unknown function in the library EUEDKEPM.sys of the component Kernel Driver. The manipulation results in improper access controls. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The affected component should be upgraded. The vendor ex…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

21/06/2026

[CVE-2026-12784] A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown fu…

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the library MDA_NTDRV.sys of the component Kernel Driver. This manipulation causes improper access controls. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not r…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

21/06/2026

[CVE-2026-52911] In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn->binding slow…

In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn->binding slowpath to bound sessions only When the binding SESSION_SETUP sets conn->binding = true, the flag stays set after the call so that the global session lookup in ksmbd_session_lookup_all() can find the session, which was not added to conn->sessions. Because the flag is connection-wide, the global lookup…

nvdaltovulnerabilidad CVSS 8.8 NVD