Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Ni" — 7366 resultados ✕ Limpiar búsqueda
22,429
Total alertas
4763
Críticas
17035
Altas
8
Ransomware
1257
Esta semana
RSS
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-91939] Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes r…
Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing unauthenticated attackers to instantiate arbitrary PHP classes with attacker-controlled properties. Attackers can exploit PHP object injection through crafted serialized payloads to trigger gadget chains and achieve database manipulation or code execution.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-88065] `tts-be` is a backend for a timetable selector that aims to help students better choose their class …
`tts-be` is a backend for a timetable selector that aims to help students better choose their class schedules. Versions prior to 2.1.0 have a Broken Access Control vulnerability across several API endpoints (such as `/api/student/{id}/photo` and `/api/course_unit/{id}/exchange/metadata`). By chaining these unauthenticated endpoints, a remote attacker can use the backend as an open proxy to bypass …
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87264] Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Inte…
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significan…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87256] Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server)…
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Suc…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87257] Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: SDK). The support…
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: SDK). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87259] Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon…
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Managemen…
nvdaltovulnerabilidad CVSS 8.4 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87260] Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon…
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to comp…
nvdaltovulnerabilidad CVSS 7.3 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87261] Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon…
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Managemen…
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87262] Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon…
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to com…
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87243] Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec…
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Finan…
nvdaltovulnerabilidad CVSS 8.0 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87245] Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec…
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financia…
nvdaltovulnerabilidad CVSS 8.0 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87241] Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec…
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financi…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-87230] Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec…
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may signif…
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87232] Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec…
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financi…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87233] Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec…
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may signif…
nvdaltovulnerabilidad CVSS 7.6 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87218] Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec…
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financi…
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87220] Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec…
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financi…
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-87210] Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec…
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financi…
nvdaltovulnerabilidad CVSS 8.3 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-87214] Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec…
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may signif…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-87186] Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec…
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financi…
nvdcriticovulnerabilidad CVSS 9.6 NVD