Alertas de Seguridad de la Información

M Alto vulnerabilidad

17/06/2026

[CVE-2025-69138] Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.

Subscriber Privilege Escalation in Genemy

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

17/06/2026

[CVE-2025-59563] Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions.

Subscriber Privilege Escalation in Sonaar

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

16/06/2026

[CVE-2026-12289] Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 1…

Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Crítico vulnerabilidad

16/06/2026

[CVE-2026-12294] Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox E…

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-49780] Customer Privilege Escalation in Dokan <= 5.0.2 versions.

Customer Privilege Escalation in Dokan

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-49083] Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.

Contributor Privilege Escalation in LatePoint

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-49063] Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions.

Unauthenticated Privilege Escalation in Listdom

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-48889] Subscriber Privilege Escalation in Amelia <= 2.3 versions.

Subscriber Privilege Escalation in Amelia

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-39579] Contributor Privilege Escalation in B Blocks <= 2.0.31 versions.

Contributor Privilege Escalation in B Blocks

nvdaltovulnerabilidad CVSS 8.8 NVD

M Crítico vulnerabilidad

15/06/2026

[CVE-2026-39583] Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions.

Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-39587] Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions.

Unauthenticated Privilege Escalation in WP BASE Booking

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-39470] Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions.

Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions.

nvdaltovulnerabilidad CVSS 7.2 NVD

M Crítico vulnerabilidad

15/06/2026

[CVE-2026-34901] Unauthenticated Privilege Escalation in iControlWP <= 5.5.3 versions.

Unauthenticated Privilege Escalation in iControlWP

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-27407] Editor Privilege Escalation in AI Engine <= 3.4.9 versions.

Editor Privilege Escalation in AI Engine

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-49111] Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalati…

Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation. This issue affects Masteriyo - LMS: from n/a through 2.2.0.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-12217] A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown f…

A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of the component Signed Kernel Driver. The manipulation leads to improper privilege management. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respon…

nvdaltovulnerabilidad CVSS 7.8 NVD

T Alto vulnerabilidad

12/06/2026

[CVE-2026-45830] A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows …

A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Crítico vulnerabilidad

11/06/2026

[CVE-2026-49060] Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege E…

Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.9.4.

nvdcriticovulnerabilidad CVSS 9.8 NVD

O Alto vulnerabilidad

11/06/2026

[CVE-2026-53814] OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent r…

OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly receive owner-scoped MCP loopback authority instead of hook-appropriate scope. Attackers with a valid hook token can exploit the /hooks/agent endpoint to cause spawned CLI runtimes to access or invoke owner-only MCP tools, potentially executing privileged actions like persistent cron…

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-45490] Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

nvdaltovulnerabilidad CVSS 7.8 NVD