Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,696
Total alertas
3097
Críticas
10327
Altas
8
Ransomware
1772
Esta semana
RSS
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0081] In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could …
In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0082] In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permissi…
In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0083] In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This c…
In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69176] Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.
Unauthenticated Local File Inclusion in ITactics
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69177] Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions.
Unauthenticated Local File Inclusion in Roneous
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69178] Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions.
Unauthenticated Local File Inclusion in Truemag
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0019] In SettingsLib, there is a possible way to disable system components due to a logic error in the cod…
In SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0063] In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier rest…
In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69163] Unauthenticated Local File Inclusion in WineShop <= 3.17 versions.
Unauthenticated Local File Inclusion in WineShop
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69165] Unauthenticated Local File Inclusion in Choreo <= 1.6 versions.
Unauthenticated Local File Inclusion in Choreo
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69167] Unauthenticated Local File Inclusion in Eros <= 1.3 versions.
Unauthenticated Local File Inclusion in Eros
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69168] Unauthenticated Local File Inclusion in Spike <= 1.2 versions.
Unauthenticated Local File Inclusion in Spike
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69171] Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.
Unauthenticated Local File Inclusion in Orpheus
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69172] Unauthenticated Local File Inclusion in Resurs <= 1.3 versions.
Unauthenticated Local File Inclusion in Resurs
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69173] Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions.
Unauthenticated Local File Inclusion in Tipsy

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69151] Unauthenticated Cross Site Scripting (XSS) in Grand Car Rental <= 3.7 versions.
Unauthenticated Cross Site Scripting (XSS) in Grand Car Rental
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69159] Unauthenticated Local File Inclusion in Printo <= 1.11 versions.
Unauthenticated Local File Inclusion in Printo
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69160] Unauthenticated Local File Inclusion in Gita <= 1.11 versions.
Unauthenticated Local File Inclusion in Gita
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69161] Unauthenticated Local File Inclusion in Snowy <= 1.13 versions.
Unauthenticated Local File Inclusion in Snowy
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69162] Unauthenticated Local File Inclusion in Grecko <= 5.17 versions.
Unauthenticated Local File Inclusion in Grecko