Alertas de Seguridad de la Información

M Alto vulnerabilidad

02/06/2026

[CVE-2021-4480] Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability…

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-49143] BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP h…

BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP handler that allows unauthenticated network-adjacent attackers to execute arbitrary code by submitting crafted JSON request bodies to the handler, which passes user-supplied data to vm.runInNewContext() combined with eval(). Attackers can escape the Node.js vm sandbox by leveraging a host-context Fun…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-10619] A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93…

A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800. This impacts an unknown function. The manipulation results in improper authentication. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or update…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-10620] A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function…

A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function of the file /index.php. This manipulation of the argument eid/did causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-5073] The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter o…

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory_paging_action' AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient escaping on the user-supplied 'order' and 'orderby' parameters and the lack of sufficient preparation on the existing SQL query in the `arm_get_directory_members()` function. This…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

02/06/2026

[CVE-2026-5076] The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in a…

The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of the password reset key in the `arm_reset_password_key` user meta field when a user requests a password reset. This is in addition to the hashed key that WordPress core stores securely in `wp_users.user_activation_key`. Th…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-49120] Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worke…

Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal network requests by creating FHIR Subscription resources with arbitrary endpoint URLs. Attackers can point subscription endpoints at internal addresses such as cloud instance metadata services, internal databases, or container orches…

nvdaltovulnerabilidad CVSS 8.5 NVD

M Crítico vulnerabilidad

02/06/2026

[CVE-2026-38967] CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response…

CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-1829] The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution …

The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.02 via the 'et_pb_text' shortcode 'cvdb_content_visibility_check' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-10607] A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspec…

A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspecialchars of the file /plus/flink.php. The manipulation of the argument msg leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-10608] A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the fi…

A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the file /plus/carbuyaction.php. The manipulation of the argument postname/des results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-10617] A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the…

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project tagged the reported issue as bu…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2025-64390] A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. …

A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J (Blu-ray Disc Java) sandbox can be escaped through a malformed JAR file.

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2021-4478] Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-boun…

Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger a buffer overflow during file parsing, allowing an attacker to crash the application or execute malicious code on the underlying system.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2019-25722] Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain hard-coded…

Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain hard-coded plaintext credentials in source code and a denial-of-service vulnerability that allows local and remote attackers to compromise device integrity across all software versions. A local attacker with direct device access can use the hard-coded credentials to access service and clinical accounts and al…

nvdaltovulnerabilidad CVSS 7.6 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-10606] A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of th…

A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of the file /plus/feedback.php of the component Feedback Handler. Executing a manipulation of the argument msg can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Crítico vulnerabilidad

02/06/2026

[CVE-2026-0611] Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthe…

Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code execution vulnerability through a deprecated .NET Remoting HTTP channel exposed on port 8989 that allows attackers to perform arbitrary file read and write operations by supplying valid .NET URI endpoints. Attackers can write ASPX webshells to the IIS wwwroot directory to achiev…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

02/06/2026

[CVE-2026-47117] OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model …

OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The privacy-filter dispatcher used broad substring matching on the user-supplied model_name parameter, allowing a value such as attacker/foo-privacy-filter-bar to route through a path that loads Hugging Face models with trust_remote_code=True. An unauthenticated attacker can supply a m…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-45553] NiceGUI is a Python-based UI framework. Prior to version 3.12.0, ui.restructured_text() renders reSt…

NiceGUI is a Python-based UI framework. Prior to version 3.12.0, ui.restructured_text() renders reStructuredText server-side with Docutils without disabling file insertion directives. When a NiceGUI application passes attacker-controlled content to ui.restructured_text(), an attacker can use standard Docutils directives (include, csv-table with :file:, raw with :file:) to read local files readable…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

02/06/2026

[CVE-2026-42654] Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System fo…

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This issue affects Wallet System for WooCommerce: from n/a through 2.7.5.

nvdaltovulnerabilidad CVSS 7.1 NVD