Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

Buscando: "Drupal" — 14 resultados ✕ Limpiar búsqueda

22,082

Total alertas

4667

Críticas

16827

Altas

8

Ransomware

1015

Esta semana

RSS

M Alto vulnerabilidad

[CVE-2026-76759] Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.

Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.

M Alto vulnerabilidad

[CVE-2026-76782] Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.

Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.

M Crítico vulnerabilidad

[CVE-2026-73475] Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue…

Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3.

M Crítico vulnerabilidad

[CVE-2026-16639] Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalizatio…

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0.

M Crítico vulnerabilidad

[CVE-2026-15089] vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest regis…

vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest registration versions: *.*.

M Crítico vulnerabilidad

[CVE-2026-11913] vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*.

vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*.

F Alto vulnerabilidad

[CVE-2026-55809] Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup…

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Flag attendance field allows Object Injection. This issue affects Flag attendance field versions: from 0.0.0 to 1.2.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

P Alto vulnerabilidad

[CVE-2026-55810] Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup…

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2.

M Alto vulnerabilidad

[CVE-2026-13244] Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup…

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Tealium iQ Tag Management allows Object Injection. This issue affects Tealium iQ Tag Management versions: from 0.0.0 to 2.4.0.

M Alto vulnerabilidad

[CVE-2026-15081] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i…

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Location Selector allows SQL Injection. This issue affects Location Selector versions: from 0.0.0 to 1.3.0.

M Crítico vulnerabilidad

[CVE-2026-12535] Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup…

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Formatter Field allows Object Injection. This issue affects Formatter Field versions: from 0.0.0 to 2.0.0.

M Crítico vulnerabilidad

[CVE-2026-10768] Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This issu…

Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This issue affects LocalGov Workflows versions: from 0.0.0 to 1.6.0.

M Crítico vulnerabilidad

[CVE-2026-9726] Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup…

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce (Basket) allows Object Injection. This issue affects Drupal AlternativeCommerce (Basket) versions: from 0.0.0 to 2.1.17.

D Alto vulnerabilidad KEV

Vulnerabilidad crítica en Drupal Core bajo explotación activa — CISA confirma

CISA ha confirmado la explotación activa de una vulnerabilidad en Drupal Core (CVE-2026-9082), afectando directamente a sitios web y portales corporativos que utilizan esta plataforma en México y Latinoamérica. Aunque no se ha detectado su uso en campañas de ransomware conocidas, la amenaza es inmediata dada su explotación en campo. La fecha límite para aplicar parches según directiva CISA es el 27 de mayo de 2026.