Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "X" — 16462 resultados ✕ Limpiar búsqueda
22,560
Total alertas
4783
Críticas
17136
Altas
8
Ransomware
1357
Esta semana
RSS
G Alto vulnerabilidad
25/06/2026
[CVE-2026-9155] OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated…
OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation.
nvdaltovulnerabilidad CVSS 8.8 NVD
O Alto vulnerabilidad
25/06/2026
[CVE-2026-57589] sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation …
sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget().
nvdaltovulnerabilidad CVSS 7.4 NVD
Q Alto vulnerabilidad
25/06/2026
[CVE-2026-9780] Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability. This vuln…
Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addclient3 webpage. …
nvdaltovulnerabilidad CVSS 8.8 NVD
Q Alto vulnerabilidad
25/06/2026
[CVE-2026-9781] Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability. This vulnerab…
Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of NVBURASDevice JSON-…
nvdaltovulnerabilidad CVSS 8.8 NVD
Q Alto vulnerabilidad
25/06/2026
[CVE-2026-9782] Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. This vulner…
Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of NVBUDeviceDrive J…
nvdaltovulnerabilidad CVSS 8.8 NVD
Q Alto vulnerabilidad
25/06/2026
[CVE-2026-9783] Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability. This vul…
Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of NVBURemovableM…
nvdaltovulnerabilidad CVSS 8.8 NVD
Q Alto vulnerabilidad
25/06/2026
[CVE-2026-9784] Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability. This vulner…
Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of NVBULibraryPort J…
nvdaltovulnerabilidad CVSS 8.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
Q Alto vulnerabilidad
25/06/2026
[CVE-2026-9785] Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability. This vulner…
Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of NVBULibrarySlot J…
nvdaltovulnerabilidad CVSS 8.8 NVD
Q Alto vulnerabilidad
25/06/2026
[CVE-2026-9786] Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerab…
Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of NVBUDashboard JSON-…
nvdaltovulnerabilidad CVSS 8.8 NVD
Q Alto vulnerabilidad
25/06/2026
[CVE-2026-9787] Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vuln…
Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of NVBULogDaemon J…
nvdaltovulnerabilidad CVSS 8.8 NVD
C Alto vulnerabilidad
25/06/2026
[CVE-2026-39951] Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a…
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injection vulnerability through graph_name_regexp in the Reports feature. This issue has been fixed in version 1.2.31.
nvdaltovulnerabilidad CVSS 7.6 NVD
C Crítico vulnerabilidad
25/06/2026
[CVE-2026-40079] Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vu…
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Command Injection due to lack of sanitization in the escape_command() function. The escape_command() function at lib/rrd.php is a no-op: it returns $command unchanged. The command line built by rrdtool_function_graph() is passed through this function and then to shell_exec($full_commandl…
nvdcriticovulnerabilidad CVSS 9.8 NVD
Q Alto vulnerabilidad
25/06/2026
[CVE-2026-7569] Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vuln…
Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the viewclient webpage. …
nvdaltovulnerabilidad CVSS 8.8 NVD
Q Alto vulnerabilidad
25/06/2026
[CVE-2026-7570] Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerab…
Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of NVBUDashboard JSON-…
nvdaltovulnerabilidad CVSS 8.8 NVD
P Alto vulnerabilidad
25/06/2026
[CVE-2026-12569] Vulnerabilidad explotada activamente en PTC Windchill and FlexPLM
CISA confirma explotación activa de una vulnerabilidad en PTC Windchill and FlexPLM. No se ha confirmado uso en campañas de ransomware conocidas. Fecha límite para aplicar parche según directiva CISA: 2026-06-28.
ptcexplotación activavulnerabilidad CISA KEV

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
G Alto vulnerabilidad
24/06/2026
[CVE-2025-60474] A buffer overflow in the gf_media_import function (/media_tools/av_parsers.c) of GPAC Project/MP4Box…
A buffer overflow in the gf_media_import function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
nvdaltovulnerabilidad CVSS 7.5 NVD
C Crítico vulnerabilidad
24/06/2026
[CVE-2026-39948] Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, th…
Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, the rfilter request parameter is retrieved via the raw accessor grv() (rather than gfrv() with FILTER_VALIDATE_IS_REGEX validation) and concatenated directly into RLIKE SQL clauses in lib/html_graph.php and lib/html_tree.php, which are reachable pre-authentication through graph_view.php on installatio…
nvdcriticovulnerabilidad CVSS 9.8 NVD
C Crítico vulnerabilidad
24/06/2026
[CVE-2026-39955] Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have p…
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have pre-authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php. This issue has been fixed in version 1.2.31.
nvdcriticovulnerabilidad CVSS 9.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2025-60467] A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of …
A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file.
nvdaltovulnerabilidad CVSS 7.5 NVD
A Alto vulnerabilidad
24/06/2026
[CVE-2026-9776] ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability.…
ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ATEN Unizon. Authentication is not required to exploit this vulnerability. The specific flaw exists within the writeFileToHttpServletResponse method. The issue results from the lack of proper …
nvdaltovulnerabilidad CVSS 7.5 NVD