Alertas de Seguridad de la Información

M Alto vulnerabilidad

05/06/2026

[CVE-2026-10586] The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress i…

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.1.3 via the `save_ai_generated_image()` function. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations originating from the web applicati…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Crítico vulnerabilidad

04/06/2026

[CVE-2024-27892] Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when…

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being applied to the switch.

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Crítico vulnerabilidad

04/06/2026

[CVE-2024-27890] Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when…

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being applied to the switch.

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Alto vulnerabilidad

04/06/2026

[CVE-2026-41249] CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitH…

CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitHub Actions workflow (`.github/workflows/static.yml`) uses the `pull_request_target` trigger but dangerously checks out the unverified code from the pull request head (`ref: ${{ github.event.pull_request.head.ref }}`). Subsequently, it executes a script (`bin/console`) from this untrusted checkout. T…

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

04/06/2026

[CVE-2026-36176] GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plain…

GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console. This allows physically-proximate attackers to extract these active tokens to perform unauthorized operations via monitoring the serial UART interface.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Crítico vulnerabilidad

04/06/2026

[CVE-2026-35904] Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07…

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

04/06/2026

[CVE-2026-10863] A security issue was fixed in the correlations over-correlation endpoint where the order query param…

A security issue was fixed in the correlations over-correlation endpoint where the order query parameter was accepted from user-controlled named request parameters. This allowed an authenticated user to override the server-defined ordering of over-correlating values. Depending on how the value was processed by the underlying data access layer, this could allow manipulation of database query orderi…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

04/06/2026

[CVE-2019-25745] WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability th…

WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'tid' parameter. Attackers can send GET requests to the admin interface with malicious 'tid' values to extract sensitive database information using time-based blind SQL injection techniques.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Crítico vulnerabilidad

04/06/2026

[CVE-2019-25738] WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allow…

WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hc_ajax_save_option action. Attackers can send POST requests to the admin-ajax.php endpoint with the action parameter set to hc_ajax_save_option to enable user registration and set the default role to administrator, enabling a…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

04/06/2026

[CVE-2019-25732] PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers t…

PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers can send GET requests to the search endpoint with crafted SQL payloads in the query parameter to extract sensitive database information including usernames, passwords, and version details.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Crítico vulnerabilidad

04/06/2026

[CVE-2019-25727] WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulnerability that allows …

WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the path parameter. Attackers can send GET requests to the edit.php endpoint with export=export_csv and a malicious path parameter to read arbitrary files like wp-config.php accessible to the web server.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

04/06/2026

[CVE-2019-25730] Listing Hub CMS 1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to …

Listing Hub CMS 1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to pages.php with crafted id values using error-based SQL injection techniques to extract database credentials, usernames, and version information.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

04/06/2026

[CVE-2019-25726] All in One Video Downloader 1.2 contains an SQL injection vulnerability that allows unauthenticated …

All in One Video Downloader 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send requests to the admin interface with UNION-based SQL injection payloads in the id parameter to extract sensitive database information including usernames, databases, and version detail…

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

04/06/2026

[CVE-2026-41860] CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token reques…

CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestHelper#create_async_endpoint and #send_http_get_request_synchronous hard-code OpenSSL::SSL::VERIFY_NONE, enabling an attacker to intercept traffic between bosh-monitor and the BOSH director or UAA and steal credentials. Affected versions: - BOSH: all versions prior to v282.1…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

03/06/2026

[CVE-2026-10771] A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate.getForEntit…

A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/utils/RestTemplateUtil.java of the component base64 Qrcode Endpoint. The manipulation of the argument url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The proj…

nvdaltovulnerabilidad CVSS 7.3 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46270] In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-…

In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting IRQ _before_ the `devm_` variant for allocating/registering the `power_supply` handle, means that the `power_supply` handle will be deallocated/unregistered _before_ the interrupt handler (since `devm_` naturally dealloca…

nvdaltovulnerabilidad CVSS 8.4 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46246] In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_lbc: Fix …

In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler Using the `devm_` variant for requesting IRQ _before_ the `devm_` variant for allocating/registering the `extcon` handle, means that the `extcon` handle will be deallocated/unregistered _before_ the interrupt handler (since `devm_` naturally deallocates in r…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

03/06/2026

[CVE-2026-36609] Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce t…

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP. Combined with the predictable XOR-based password encoding (securityEncode function), this allows an attacker to reverse captured authentication tokens to recover the plaintext password.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

03/06/2026

[CVE-2026-36611] Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer w…

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST requests without SOAPAction header on UPnP port 1900, exposing internal memory to unauthenticated adjacent network attackers.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

03/06/2026

[CVE-2026-36608] Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forwar…

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP (192.168.1.1) or localhost (127.0.0.1) as InternalClient. An unauthenticated LAN attacker can expose the admin panel to the internet with a single SOAP request.

nvdaltovulnerabilidad CVSS 8.8 NVD