Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,113
Total alertas
4677
Críticas
16848
Altas
8
Ransomware
1020
Esta semana
RSS
cwe-269 × Limpiar todo ×
M Alto vulnerabilidad
19/08/2026
[CVE-2026-76396] In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capabil…
In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a scheduled search to load and deserialize a model file through the apply search command. The improper access control is possible because Splunk AI Toolkit does not mark the apply search command as risky. For more information see Troubleshoot the AI Toolkit (https://help.splunk.com/e…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
19/08/2026
[CVE-2026-76350] In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role wit…
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could configure Portable Document Format (PDF) attachments in the email alert action workflow. When the email alert action runs, it could execute arbitrary Search Processing Language (SPL) commands with system-level privileges, expose all relevant data, and affect sy…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
19/08/2026
[CVE-2026-76253] In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role wit…
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could run arbitrary Search Processing Language (SPL) commands with the highest level of system privilege and read every credential stored in the credential store, which can allow for disclosure and modification of all relevant data and affect system integrity and ava…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
19/08/2026
[CVE-2026-76259] In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local …
In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all relevant data and system integrity available to the user account running Splunk Enterprise. The vulnera…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
19/08/2026
[CVE-2026-68561] Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow({ update }) ru…
Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow({ update }) rule in server/permissions/boards.js called canUpdateBoardSort in server/lib/utils.js, which authorized any board member whenever fieldNames included sort. Because Meteor combines allow rules with OR semantics and applies the complete modifier, a comment-only or read-only member could send one Boards.…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
19/08/2026
[CVE-2026-16874] IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges…
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
19/08/2026
[CVE-2026-16850] IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod…
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements.
nvdaltovulnerabilidad CVSS 8.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
19/08/2026
[CVE-2026-16703] IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg…
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
19/08/2026
[CVE-2026-70421] Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulne…
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-75924] A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole …
A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive permissions, can read any secret across all namespaces. Additionally, it can approve arbitrary Certificate Signing Requests (CSRs), which could lead to information disclosure and privilege escalation within the cluster.
nvdaltovulnerabilidad CVSS 8.7 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-75857] CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerability in the exec_shell_interact (alias …
CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerability in the exec_shell_interact (alias exec_interact) tool, whose approval_requirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an already-approved long-running interactive shell (e.g., a python3 -i REPL, mysql, ssh, or sudo -i sessio…
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-74965] Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154…
Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-74952] Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 15…
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-74953] Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 1…
Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-74955] Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154 …
Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1.
nvdaltovulnerabilidad CVSS 8.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
18/08/2026
[CVE-2026-74950] Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154 and…
Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-74939] Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, …
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-74941] Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox…
Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-74942] Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefo…
Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-74935] Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, …
Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1.
nvdaltovulnerabilidad CVSS 8.8 NVD