Alerta · Publicado 24/04/2026 · Actualizado 26/05/2026
CISA ha incluido cuatro vulnerabilidades ya exploitadas en su catálogo oficial: CVE-2024-7399, CVE-2024-57726, CVE-2024-57728 y CVE-2025-29635. Estas vulnerabilidades presentan riesgo inmediato para infraestructuras en México y Latinoamérica debido a la existencia de exploits públicos verificados. Se recomienda priorizar la evaluación de sistemas afectados y aplicar mitigaciones de manera urgente.
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2024-57726 SimpleHelp Missing Authorization Vulnerability CVE-2024-57728 SimpleHelp Path Traversal Vulnerability CVE-2025-29635 D-Link DIR-823X Command Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and E
Alerta publicada por CISA / US-CERT. Consulta el advisory completo para detalles técnicos, indicadores de compromiso y mitigaciones específicas.