Alertas de Seguridad de la Información

F Crítico vulnerabilidad

09/06/2026

[CVE-2026-49841] FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary …

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, the mod_verto HTTP request handler allocates a fixed 2 MiB buffer for a POST application/x-www-form-urlencoded body but accepts Content-Length up to just under 10 MiB. The body-read loop is bo…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-45504] Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to ele…

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-24065] Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerab…

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the privileged helper service. The helper validates connecting XPC clients using the client process identifier (PID) to verify code-signing identity. Because process identifiers can be reused, a local attacker can exploit a race condition between the time a connection request is made and th…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2017-20251] WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that al…

WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes through the WordPress REST API. Attackers can send POST requests to the wp-json/wp/v2/posts endpoint with crafted content containing insert_php shortcodes to include and execute remote PHP files on the ser…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2017-20244] Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthent…

Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to read arbitrary database information by exploiting an unescaped POST parameter. Attackers can inject SQL code through the 'mwpformid' parameter in requests to the admin-ajax.php endpoint with the 'send_mwp_form' action to extract sensitive database contents.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2017-20245] Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthent…

Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped 'idsignup' POST parameter. Attackers can send crafted requests to the admin-ajax.php endpoint with malicious SQL payloads in the 'idsignup' parameter to read arbitrary data from the database.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2017-20247] WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthen…

WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid parameter. Attackers can send GET requests with crafted SQL payloads in the aid parameter to extract sensitive database information including user credentials and table contents.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2017-20248] Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attack…

Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attackers can send requests to asgallDownload.php with directory traversal sequences ../ to access sensitive files outside the intended directory.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2017-20249] Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attack…

Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. Attackers can send GET requests with crafted SQL payloads in the albid parameter to extract sensitive database information including user credentials and authentication hashes.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2017-20250] Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers …

Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can send requests to macdownload.php with directory traversal sequences to access sensitive files like wp-load.php outside the intended plugin directory.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2016-20065] Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unaut…

Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the selectedCategory parameter. Attackers can submit POST requests to the admin-ajax.php endpoint with the UpdateCategoryList action to extract sensitive database information from WordPress tables.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2017-20243] WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerab…

WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the space_id parameter. Attackers can send GET requests to the booking-page endpoint with malicious space_id values using AND SLEEP() payloads to extract sensitive database information.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2016-20062] Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthent…

Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the 'pollid' POST parameter. Attackers can send requests to the admin-ajax.php endpoint with the 'spAjaxResults' action and malicious 'pollid' values to execute arbitrary SQL queries and read sensitive data from the WordP…

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-41720] Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a …

Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password. Affected versions: Spring LDAP 2.4.0 through 2.4.4; 3.2.0 through 3.2.17; 3.3.0 through 3.3.7; 4.0.0 through 4.0.3.

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-40983] In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a…

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-40984] In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a…

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18; 1.9.0 through 1.9.17. micrometer-jetty11 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.1…

nvdaltovulnerabilidad CVSS 7.5 NVD

E Medio amenaza

09/06/2026

Cybercriminals: the 'auditors' you never hired

ESET Research publica: Cybercriminals: the 'auditors' you never hired. Every organisation gets audited. The question is who does the auditing.

esetthreat-researchbusiness-security Editorial

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-40128] SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a …

SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enabling path traversal and processing of the included file. Processing the included file could allow the attacker to view or modify sensitive information or render any part of the local system unavailable.

nvdcriticovulnerabilidad CVSS 9.0 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-27671] Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP…

Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on the confidentiality, integrity, and availability of the application.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

08/06/2026

[CVE-2026-49141] WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine…

WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to other tenants by supplying an arbitrary caller-controlled contact_id in the POST request body without tenant ownership verification. Attackers can exploit the service-role client that bypasses row-level security to modif…

nvdaltovulnerabilidad CVSS 7.1 NVD