Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Ni" — 2100 resultados ✕ Limpiar búsqueda
22,298
Total alertas
4744
Críticas
16966
Altas
8
Ransomware
1168
Esta semana
RSS
30 días × Limpiar todo ×
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83041] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impa…
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83045] Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime…
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact …
nvdaltovulnerabilidad CVSS 8.5 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-83031] Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente…
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. While the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact a…
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83022] Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon…
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle WebCenter Enterprise Capture executes to compromis…
nvdaltovulnerabilidad CVSS 7.9 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83026] Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen…
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Identity Manager Connector executes to compromise Oracle Iden…
nvdaltovulnerabilidad CVSS 8.3 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-83027] Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen…
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Identity Manager Connector executes to compromise Oracle Identi…
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83028] Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen…
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Identity Manager Connector executes to compromise Oracle Iden…
nvdaltovulnerabilidad CVSS 7.5 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-83021] Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Cont…
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significant…
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-82997] Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa…
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may signifi…
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-82998] Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa…
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may signifi…
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-82999] Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa…
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significant…
nvdcriticovulnerabilidad CVSS 9.9 NVD
M Crítico vulnerabilidad
15/09/2026
[CVE-2026-83001] Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic…
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impa…
nvdcriticovulnerabilidad CVSS 9.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-83002] Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic…
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly imp…
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-82993] Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Busi…
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significan…
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76820] OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.…
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny list or reject private, loopback, and link-local destinations, allowing an authenticated account with the …
nvdaltovulnerabilidad CVSS 7.7 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76692] A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacen…
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service (system crash) or the disclosure of uninitialized stack memory.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76693] A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote …
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service against certain services running on impacted Gateways.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76682] A vulnerability in the network security monitoring component of intrusion detection systems could al…
A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on the system.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76684] Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator th…
Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
15/09/2026
[CVE-2026-76685] A vulnerability exists in the proxy packet processing logic of the affected component where it impro…
A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful exploitation could result in a buffer overflow, potentially leading to remote code execution or denial-…
nvdaltovulnerabilidad CVSS 8.1 NVD