Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Multiple Vendors" — 17216 resultados ✕ Limpiar búsqueda
22,734
Total alertas
4810
Críticas
17270
Altas
8
Ransomware
1307
Esta semana
RSS
M Crítico vulnerabilidad
27/07/2026
[CVE-2026-59527] Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.
Unauthenticated SQL Injection in MapSVG
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59528] Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions.
Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59529] Unauthenticated Sensitive Data Exposure in Ebook Store <= 6.19 versions.
Unauthenticated Sensitive Data Exposure in Ebook Store
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59530] Unauthenticated Broken Access Control in Stripe For WooCommerce <= 4.0.7 versions.
Unauthenticated Broken Access Control in Stripe For WooCommerce
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59531] Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.
Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59532] Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions.
Unauthenticated Other Vulnerability Type in Booking and Rental Manager
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
27/07/2026
[CVE-2026-59533] Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions.
Unauthenticated SQL Injection in Relevanssi Light
nvdcriticovulnerabilidad CVSS 9.3 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59534] Unauthenticated Broken Access Control in Post My CF7 Form <= 6.2.0 versions.
Unauthenticated Broken Access Control in Post My CF7 Form
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
27/07/2026
[CVE-2026-65879] Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret …
Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the mail from address of forms.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
27/07/2026
[CVE-2026-61511] vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB…
vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code by supplying crafted input through the pagenav[pagenumber] parameter. Attackers can exploit the insufficiently restrictive regex filter by using phpfuck-style …
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59687] An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Objec…
An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the Geo Location management interface, potentially resulting in complete system compromise.
nvdaltovulnerabilidad CVSS 8.4 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59688] An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Objec…
An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the backup restore functionality, potentially resulting in complete system compromise.
nvdaltovulnerabilidad CVSS 8.4 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59689] An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Ob…
An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system compromise.
nvdaltovulnerabilidad CVSS 8.0 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59690] A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Objec…
A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be accessible to their permission level, potentially resulting in a system compromise.
nvdaltovulnerabilidad CVSS 8.0 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59686] An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Objec…
An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the management interface, potentially resulting in complete system compromise.
nvdaltovulnerabilidad CVSS 8.4 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
27/07/2026
[CVE-2026-17527] In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to p…
In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts this permission as sufficient to authorize cloning the contents of any PVC the caller can name, without requiring write access to the source n…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-17523] A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user …
A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation (LPE). This allows the attacker to gain root privileges and take full control of the affected system.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-64531] In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversi…
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions length check") allowed the total sw_flow_actions stream to grow beyond 64 KiB, which is valid, but also removed the last guar…
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-64532] In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.da…
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} In do_action()'s UpdateRecordDataRoot (fslog.c:3489) and UpdateRecordDataAllocation (fslog.c:3697) cases, the memmove destination is `Add2Ptr(e, le16_to_cpu(e->view.data_off))`, where e->view.data_off comes from an on-disk NTFS_DE inside an INDEX_ROOT or …
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-64533] In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow …
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay conversion log_replay() converts DIR_PAGE_ENTRY_32 records into DIR_PAGE_ENTRY records when replaying version 0 restart tables. During this conversion, the memmove() length is derived directly from the on-disk lcns_follow field: memmove(&dp->vcn, &dp0->vcn_low, 2 * sizeof(u64) + …
nvdaltovulnerabilidad CVSS 7.8 NVD