Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

22,082

Total alertas

4667

Críticas

16827

Altas

8

Ransomware

1014

Esta semana

RSS

cwe-798 × 30 días × Limpiar todo ×

M Crítico vulnerabilidad Nuevo

[CVE-2026-105278] The published Docker image for openPDC includes a fixed administrative credential with no forced cha…

The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application.

M Alto vulnerabilidad Nuevo

[CVE-2026-84250] IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-code…

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges.

M Crítico vulnerabilidad

[CVE-2026-62252] Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer…

Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an `admin` account with the password `sipcapture` (stored as a legacy SHA-256 hex hash). There is no first-login forced-change mechanism. Any attacker who reaches the login endpoint immediately gains full administ…

M Alto vulnerabilidad

[CVE-2026-102161] An unauthenticated attacker located on an adjacent private network (or any attacker routed through a…

An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their source IP address and gain administrative session privileges on the CV-CUE backend.

M Crítico vulnerabilidad

[CVE-2026-54472] Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credential…

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8

M Crítico vulnerabilidad

[CVE-2026-61421] Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credential…

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

M Crítico vulnerabilidad

[CVE-2026-105641] Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and …

Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide fixed, publicly known SECRET_KEY and LIVE_SERVER_SECRET_KEY defaults that remain active when operators do not override them. The top-level setup.sh randomizes secrets only for the development Docker Compose path, leaving unchanged aio and cli community de…

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-105147] A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the com…

A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Handler. This manipulation of the argument DEFAULT_BCRYPT_SECRET_KEY/DEFAULT_NACL_SECRET_KEY causes hard-coded credentials. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but di…

M Alto vulnerabilidad

[CVE-2026-94592] Armatura One's database initialization routine assigns a fixed, vendor-defined password to the datab…

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can authenticate as the database superuser on a deployment where it has not been changed.

M Alto vulnerabilidad

[CVE-2026-103097] An API key is hardcoded and retrievable from the application package. Since Android applications can…

An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.

M Alto vulnerabilidad

[CVE-2026-103096] API key is hardcoded and retrievable from the application package. Since Android applications can be…

API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.

M Crítico vulnerabilidad

[CVE-2026-96587] The Viidure Android application embeds permanent, plaintext cloud storage credentials within its com…

The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries.

M Alto vulnerabilidad

[CVE-2026-100294] In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credenti…

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation.

M Alto vulnerabilidad

Vulnerabilidad alta en Refly AI (hasta v1.1.0): exposición de credenciales por JWT

Se detectó una vulnerabilidad en el manejador de tokens JWT del componente de configuración de Refly AI versiones hasta 1.1.0, que permite la inyección de credenciales hardcodeadas mediante manipulación de entrada. El ataque es exploitable remotamente y el exploit está público, afectando potencialmente plataformas de IA en empresas de LATAM que usen esta herramienta para automatización y análisis.

M Alto vulnerabilidad

[CVE-2026-17644] IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain un…

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

M Crítico vulnerabilidad

[CVE-2026-47116] LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where root and guest account pa…

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where root and guest account passwords are stored as reversible hashes in /etc/shadow, recoverable using dictionary-based cracking tools. Attackers can use the recovered credentials to authenticate via Telnet or SSH and obtain full root-level access to the operating system.

M Crítico vulnerabilidad

[CVE-2026-65113] NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause us…

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure.

M Alto vulnerabilidad

Credenciales hardcodeadas en aiyiyi121 SxDevOps 1.0/1.1 (CVE-2026-93970)

Se ha identificado una vulnerabilidad de severidad alta (CVSS 7.3) en aiyiyi121 SxDevOps 1.0 y 1.1 que expone credenciales hardcodeadas en el archivo backend/sxdevops/settings.py del componente Settings Handler. La falla permite acceso remoto sin autenticación y afecta principalmente a equipos DevOps que utilizan esta plataforma en infraestructuras altas de México y Latinoamérica. El parche identificado es 2b4bf8585c3e731e7a8af30801ea46680bc783f9.

M Alto vulnerabilidad

Vulnerabilidad alta de credenciales hardcodeadas en aiyiyi121 SxDevOps 1.0/1.1

Se identificó una vulnerabilidad de severidad alta (CVSS 7.3) en aiyiyi121 SxDevOps versiones 1.0 y 1.1 que permite acceso remoto mediante credenciales hardcodeadas en la función ensure_default_superuser del archivo rbac/services.py. Esta falla compromete sistemas de control de acceso y gestión de infraestructura en empresas que utilizan este software en entornos cloud o on-premise en México y LATAM.

M Alto vulnerabilidad

[CVE-2026-84034] IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hard…

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise of sensitive system information.

1 2 Siguiente →