Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers Password Generator VPN PSK Generator
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV Vigía LATAM
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Multiple Vendors" — 19118 resultados ✕ Limpiar búsqueda
24,802
Total alertas
5044
Críticas
18988
Altas
8
Ransomware
2827
Esta semana
RSS
M Alto vulnerabilidad
01/09/2026
[CVE-2026-18771] Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co…
Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass. This issue affects Talassoft Industrial Management Software: from V4 before V.16.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2026-18780] Cross-Site request forgery (CSRF) vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft…
Cross-Site request forgery (CSRF) vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Cross Site Request Forgery. This issue affects Talassoft Industrial Management Software: from V.4 before V.16.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2026-18630] Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i…
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection. This issue affects Talassoft Industrial Management Software: from V.4 before V.16.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2026-84218] A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-co…
A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a `target.url` value from a Jolokia POST request and passes it to `JMXServiceURL` and `JMXConnectorFactory` for establishing the remote JMX connection. The existing denylist only reje…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2026-79684] Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with li…
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2026-51766] Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows un…
Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reboot the local device and, on a master, fan out reboot commands to mesh slaves via sending a crafted MQTT message to the cs_broker component.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2026-58571] Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited p…
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
nvdaltovulnerabilidad CVSS 8.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
01/09/2026
[CVE-2026-58572] Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileg…
Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2026-19513] The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to,…
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.0.2. This is due to insufficient validation of multi-file upload chunk state in the `GFAsyncUpload::upload()` function, where public form state URL hashes can be reused as chunk continuation hashes and attacker-controlled temporary filenames are accepted before sanitization. This m…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Crítico vulnerabilidad
01/09/2026
[CVE-2026-18808] Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical Electr…
Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical Electronics Inc. KIO (Klemsan Internet Objects) allows Code Injection. This issue affects KIO (Klemsan Internet Objects): before v1.9.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
01/09/2026
[CVE-2026-18210] Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i…
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store allows SQL Injection. This issue affects Products's Store: before 030631b2.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2024-14047] A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a dir…
A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existing access to the system could pre-position malicious filesystem links, causing a subsequent elevated Winlogbeat operation to write to or delete arbitrary files. Successful exploitation could result in a denial of service.
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2026-84145] Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR …
Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2026-84131] Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed …
Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2026-84123] Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was…
Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2.
nvdaltovulnerabilidad CVSS 8.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
01/09/2026
[CVE-2026-84128] Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155.
Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2026-84117] Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
01/09/2026
[CVE-2026-84119] Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed …
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Crítico vulnerabilidad
01/09/2026
[CVE-2026-84121] Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in…
Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
01/09/2026
[CVE-2026-79683] Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with li…
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker-controlled content to arbitrary filesystem paths.
nvdaltovulnerabilidad CVSS 8.8 NVD