Alerta · Publicado 27/05/2026 · Actualizado 28/05/2026
La Agencia de Seguridad de Infraestructura y Ciberseguridad de EE.UU. (CISA) ha catalogado tres vulnerabilidades de día cero (CVE-2026-8398, CVE-2026-45321, CVE-2026-48027) como activamente explotadas en el panorama de amenazas global. Empresas en México y Latinoamérica deben priorizar la evaluación de exposición en sus activos críticos, ya que estos vectores de ataque representan riesgo inmediato de compromiso.
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-8398 Daemon Tools Lite Embedded Malicious Code Vulnerability CVE-2026-45321 TanStack Unspecified Vulnerability CVE-2026-48027 Nx Console Embedded Malicious Code Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 r
Alerta publicada por CISA / US-CERT. Consulta el advisory completo para detalles técnicos, indicadores de compromiso y mitigaciones específicas.