Alertas de Seguridad de la Información

L Alto vulnerabilidad

01/07/2026

[CVE-2026-53329] In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Use krealloc_a…

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Use krealloc_array() in dal_vector_reserve() [Why & How] dal_vector_reserve() computes the allocation size as "capacity * vector->struct_size" using uint32_t arithmetic, which can silently wrap to a small value on overflow. This would cause krealloc to return a smaller buffer than expected, leading to heap overf…

nvdaltovulnerabilidad CVSS 7.0 NVD

L Alto vulnerabilidad

01/07/2026

[CVE-2026-53330] In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bou…

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() [Why & How] The aux_rd_interval array in struct dc_lttpr_caps is declared with MAX_REPEATER_CNT - 1 (7) elements, indexed 0..6. However, the offset parameter passed to dp_get_eq_aux_rd_interval() can be as large as MAX_REPEATER_CNT (8) when a sink reports 8 L…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-5120] A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 coul…

A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 could allow a user to access unauthorized data from another user.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-53903] MCO is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the /customer/servl…

MCO is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the /customer/servlet/mco/webapi/trading-document/fetchPdfStatement endpoint. The application does not properly validate whether an authenticated user is authorized to access a requested document, allowing direct retrieval based on a user-supplied identifier. An attacker can access trading documents belonging to other…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-53904] MCO is vulnerable to Account Denial of Service due to improper implementation of password reset func…

MCO is vulnerable to Account Denial of Service due to improper implementation of password reset functionality. Each password reset request invalidates previously set password as well as previously issued temporary passwords, furthermore, password resets are not limited in any way. An attacker who provides victim's email and answer to their security question, can successfully initiate the reset pro…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-53905] MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/admin-view-hi…

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/admin-view-hierarchy/get-acl-tree-structure endpoint. An authenticated, low-privileged user can retrieve administrator access control structures without proper authorization checks. This may expose sensitive permission mappings and internal configuration details. Because vendor contact attempts were unsuccessfu…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-53906] MCO is vulnerable to Path Disclosure and Path Traversal in file handling functionality related to da…

MCO is vulnerable to Path Disclosure and Path Traversal in file handling functionality related to data export and upload. Improper validation of the filename parameter allows writing files to arbitrary locations as well as indirect disclosure of absolute server paths through error messages. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 25.…

nvdaltovulnerabilidad CVSS 8.2 NVD

F Alto vulnerabilidad

01/07/2026

[CVE-2026-14181] @fastify/middie versions 9.1.0 through 9.3.2 fail to guard the URL normalization step used by the st…

@fastify/middie versions 9.1.0 through 9.3.2 fail to guard the URL normalization step used by the standalone engine when incoming request paths contain malformed percent-encoded sequences. Inputs such as an incomplete percent escape or a truncated multibyte sequence cause the underlying decoder to throw synchronously, and the exception escapes the middie normalize step and terminates the Node.js p…

nvdaltovulnerabilidad CVSS 7.5 NVD

F Crítico vulnerabilidad

01/07/2026

[CVE-2026-14198] @fastify/middie versions 9.1.0 through 9.3.2 decode the encoded slash %2F inside path parameter valu…

@fastify/middie versions 9.1.0 through 9.3.2 decode the encoded slash %2F inside path parameter values before matching middleware paths, while Fastify's underlying router preserves the encoding during route lookup. The two layers disagree on the canonical request path, so the middleware fails to match a URL that the route handler does match. When middleware is used for authentication, authorizatio…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-13228] The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerab…

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 5.6.3 This is due to an Insecure Direct Object Reference (IDOR) in the create_or_update() function of OsOrdersController, which allows an authenticated Agent to supply an arbitrary order[customer_id] and overwrite any Late…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-12142] The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cro…

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via '_name[]' Array Parameter in all versions up to, and including, 9.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-12575] DVP80ES3 with  Improper Resource Shutdown or Release vulnerability.

DVP80ES3 with  Improper Resource Shutdown or Release vulnerability.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-12576] DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Chann…

DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-50043] Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exi…

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge MB-A100/MB-A110. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product with an administrative privilege.

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-10538] Messaging consumer functionality allows deserialization of user-controlled data without sufficient r…

Messaging consumer functionality allows deserialization of user-controlled data without sufficient restriction of allowed object types in the out of support Control-M/Server and Control-M/Enterprise Manager versions 9.0.20.x and potentially earlier. This issue may allow an authenticated attacker to trigger unintended server-side behavior through crafted serialized content.

nvdaltovulnerabilidad CVSS 8.0 NVD

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-10539] A Control-M/Server communication command does not sufficiently filter or sanitize user-supplied inpu…

A Control-M/Server communication command does not sufficiently filter or sanitize user-supplied input. Under certain conditions, this issue may allow an unauthenticated attacker to execute unauthorized commands on the affected server, potentially leading to compromise of the server.  This vulnerability affects Control-M/Server versions 9.0.20.x to 9.0.21.200 (included) and potentially earlier u…

nvdcriticovulnerabilidad CVSS 9.0 NVD

M Crítico vulnerabilidad

01/07/2026

[CVE-2026-11387] The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for …

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updating their details like reset the password of any user account, including administrators, and gain full a…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-12158] The RegistrationMagic – User Registration Forms Plugin plugin for WordPress is vulnerable to Cross-S…

The RegistrationMagic – User Registration Forms Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.0.9.1. This is due to missing or incorrect nonce validation on the process_request function. This makes it possible for unauthenticated attackers to escalate the privileges of an arbitrary form submitter to administrator by creating a malic…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-12224] The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via update_capabilities RES…

The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via update_capabilities REST Endpoint in all versions up to, and including, 5.0.4. This is due to the `update_capabilities()` REST handler accepting arbitrary capability strings from the request body and passing them directly to WP_User::add_cap() with no allowlist validation, only verifying that the caller holds the dokanda…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

01/07/2026

[CVE-2026-11568] The Product Configurator for WooCommerce WordPress plugin before 1.7.3 does not perform any authoris…

The Product Configurator for WooCommerce WordPress plugin before 1.7.3 does not perform any authorisation or post-status check before returning WooCommerce product data through a public AJAX action, allowing unauthenticated users to retrieve the data (title, price, weight, stock status, and configurator option pricing/SKUs) of private and draft, non-public products by supplying the product ID. Wor…

nvdaltovulnerabilidad CVSS 7.5 NVD