Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,093
Total alertas
4671
Críticas
16834
Altas
8
Ransomware
1023
Esta semana
RSS
cwe-121 × Limpiar todo ×
M Alto vulnerabilidad
08/09/2026
[CVE-2026-68878] Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate priv…
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
nvdaltovulnerabilidad CVSS 8.0 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-68838] Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over…
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvdaltovulnerabilidad CVSS 8.0 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-68834] Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over…
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvdaltovulnerabilidad CVSS 8.0 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-67379] Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a netwo…
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-62706] Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute …
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
08/09/2026
[CVE-2026-86509] A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of t…
A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Crítico vulnerabilidad
07/09/2026
Vulnerabilidad crítica de desbordamiento de búfer en D-Link DIR-822A A_101
Se ha identificado una vulnerabilidad de desbordamiento de búfer en la pila (stack-based buffer overflow) en el componente udhcpcd del router D-Link DIR-822A versión A_101, específicamente en la función strcpy del archivo udhcpcd/serverpacket.c. Esta falla puede ser explotada remotamente sin autenticación, permitiendo a atacantes ejecutar código arbitrario con privilegios del dispositivo. El exploit se encuentra públicamente disponible y actualmente es explotable en infraestructuras de empresas en México y LATAM que utilicen este modelo de router.
nvdcriticovulnerabilidad CVSS 10.0 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
05/09/2026
[CVE-2026-86140] In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.
nvdaltovulnerabilidad CVSS 8.0 NVD
M Crítico vulnerabilidad
04/09/2026
[CVE-2026-85504] FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long…
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
04/09/2026
[CVE-2026-85506] ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_…
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
04/09/2026
[CVE-2026-85507] ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc…
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
04/09/2026
[CVE-2026-85508] ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc…
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
04/09/2026
[CVE-2026-85509] FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-f…
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
03/09/2026
[CVE-2026-73600] Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnera…
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
02/09/2026
Desbordamiento de heap en módulo SMM permite ejecución de código arbitrario (CVE-2023-20577)
Una vulnerabilidad de desbordamiento de heap en el módulo SMM (System Management Mode) afecta múltiples fabricantes de firmware y procesadores. Un atacante que combine esta falla con acceso a una segunda vulnerabilidad que permita escribir en flash SPI podría lograr ejecución arbitraria de código en nivel de firmware, comprometiendo completamente la integridad del sistema. Esto representa un riesgo alta para servidores, estaciones de trabajo y dispositivos administrativos en infraestructuras empresariales LATAM.
nvdaltovulnerabilidad CVSS 7.4 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
02/09/2026
[CVE-2026-84351] Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attack…
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD
M Crítico vulnerabilidad
01/09/2026
[CVE-2026-78012] An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-messa…
An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an error or warning. The result could be memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
31/08/2026
[CVE-2026-82616] A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUpl…
A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Crítico vulnerabilidad
31/08/2026
[CVE-2026-82593] A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /bo…
A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Crítico vulnerabilidad
30/08/2026
[CVE-2026-82592] A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the f…
A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.
nvdcriticovulnerabilidad CVSS 9.9 NVD