Alerta · Publicado 08/06/2026 · Actualizado 09/06/2026
El Agencia de Ciberseguridad e Infraestructura Crítica de EE.UU. (CISA) ha incluido dos vulnerabilidades activamente explotadas en su catálogo de riesgos conocidos. Aunque los CVE están asociados a 2026, estas vulnerabilidades representan un riesgo inmediato para infraestructuras críticas y empresariales en LATAM. Se recomienda verificar urgentemente si los sistemas en operación están afectados.
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-42271 BerriAI LiteLLM Command Injection Vulnerability CVE-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the
Alerta publicada por CISA / US-CERT. Consulta el advisory completo para detalles técnicos, indicadores de compromiso y mitigaciones específicas.