Vulnerabilidades

Con el objetivo de informar, advertir y ayudar a los profesionales sobre las últimas vulnerabilidades de seguridad en sistemas tecnológicos, ponemos a disposición de los usuarios interesados en esta información una base de datos con información en castellano sobre cada una de las últimas vulnerabilidades documentadas y conocidas.

Este repositorio con más de 75.000 registros esta basado en la información de NVD (National Vulnerability Database) – en función de un acuerdo de colaboración – por el cual desde INCIBE realizamos la traducción al castellano de la información incluida. En ocasiones este listado mostrará vulnerabilidades que aún no han sido traducidas debido a que se recogen en el transcurso del tiempo en el que el equipo de INCIBE realiza el proceso de traducción.

Se emplea el estándar de nomenclatura de vulnerabilidades CVE (Common Vulnerabilities and Exposures), con el fin de facilitar el intercambio de información entre diferentes bases de datos y herramientas. Cada una de las vulnerabilidades recogidas enlaza a diversas fuentes de información así como a parches disponibles o soluciones aportadas por los fabricantes y desarrolladores. Es posible realizar búsquedas avanzadas teniendo la opción de seleccionar diferentes criterios como el tipo de vulnerabilidad, fabricante, tipo de impacto entre otros, con el fin de acortar los resultados.

Mediante suscripción RSS o Boletines podemos estar informados diariamente de las últimas vulnerabilidades incorporadas al repositorio.

CVE-2026-41637

Fecha de publicación:

22/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC (DoQ) queries are not accounted properly by Unbound resulting in low-cost inflation of the waiting number of replies for already in-flight resolution queries. This results in degradation of resolution service for new clients for already in-flight queries. A malicious actor can exploit the vulnerability by issuing DoQ queries for query names that need resolution and proceeding on immediately terminating the query by one of STOP_SENDING/RESET_STREAM/CONNECTION_CLOSE QUIC frames. Those terminated DoQ queries are not properly counted for and keep inflating the number of waiting replies for in-flight queries. When the maximum is reached, it results in silent query drops for new clients needing resolution for already in-flight queries. This vulnerability needs Unbound to be compiled with DoQ support (&#39;--with-libngtcp2&#39;) and the &#39;quic-port&#39; to be configured for the listening interfaces. Additionally, a malicious actor needs access to multiple source IPs to bypass the by-default configured &#39;wait-limit&#39; option.

Gravedad CVSS v3.1: BAJA

Última modificación:

24/07/2026

CVE-2026-32665

Fecha de publicación:

22/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enabled, the first two bidirectional streams on a new QUIC connection (stream_id 0 and 4) bypass the per-stream &#39;quic-size&#39; gate entirely, and large input buffers are allocated later, after only the 2-byte length prefix has been received from the initial streams. As a result, a remote client can make Unbound exceed the configured &#39;quic-size&#39; limit with low-cost input. Using only one connection and two streams, each sending a declared 65535-byte length prefix and then holding the streams open, a client can already trivially make Unbound roughly allocate double that amount. This is a remote availability issue / memory-accounting bypass in the downstream DoQ implementation that leads to denial of service for new DoQ clients. This vulnerability needs Unbound to be compiled with DoQ support (&#39;--with-libngtcp2&#39;) and the &#39;quic-port&#39; to be configured for the listening interfaces.

Gravedad CVSS v3.1: ALTA

Última modificación:

24/07/2026

CVE-2026-40691

Fecha de publicación:

22/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply length against the destination buffer size. The size clamp that protects the UDP path is not applied on the TCP path, so a reply larger than 65504 bytes is shifted forward by 48 bytes inside a buffer of capacity equal to &#39;msg-buffer-size&#39;, writing past the end of the heap allocation. A single malicious encrypted query crashes the resolver and lead to denial of service. This vulnerability needs Unbound to be compiled with DNSCrypt support (&#39;--enable-dnscrypt&#39;) and the &#39;dnscrypt:&#39; clause to be configured and enabled for the listening interfaces.

Gravedad CVSS v3.1: ALTA

Última modificación:

24/07/2026

CVE-2026-16560

Fecha de publicación:

22/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contains a legacy-quoted value, the server won&#39;t close the heap allocation allowing another call to refer to the same memory pointer causing a denial of service or an arbitrary memory write operation.

Gravedad CVSS v3.1: MEDIA

Última modificación:

22/07/2026

CVE-2026-14865

Fecha de publicación:

22/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML without disabling DTD processing, allowing unauthenticated denial of service via recursive XML entity expansion.

Gravedad CVSS v3.1: MEDIA

Última modificación:

22/07/2026

CVE-2026-14932

Fecha de publicación:

22/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component&#39;s ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory.

Gravedad CVSS v3.1: MEDIA

Última modificación:

22/07/2026

CVE-2026-14586

Fecha de publicación:

22/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under pressure, an assertion in libngtcp2 about monotonic timestamps could trigger and result in server termination and thus denial of service. When interfacing with libngtcp2, for DNS-over-QUIC support in Unbound, it is expected to use monotonic time. Unbound was using realtime instead, and in DoQ environments with high concurrency and under pressure, an assert in libngtcp2 for the quic timestamp would trigger and terminate the server.This vulnerability needs Unbound to be compiled with DoQ support (&#39;--with-libngtcp2&#39;) and the &#39;quic-port&#39; to be configured for the listening interfaces.

Gravedad CVSS v3.1: MEDIA

Última modificación:

22/07/2026

CVE-2026-16232

Fecha de publicación:

22/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

Gravedad CVSS v3.1: CRÍTICA

Última modificación:

23/07/2026

CVE-2026-13188

Fecha de publicación:

22/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler request parameters may be tampered with, potentially altering dialog server-side behavior and enabling chained exploitation.

Gravedad CVSS v3.1: MEDIA

Última modificación:

22/07/2026

CVE-2026-13189

Fecha de publicación:

22/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of the language parameter in the spell check handler may allow an attacker to influence server-side file path resolution and trigger unintended server-side requests.

Gravedad CVSS v3.1: ALTA

Última modificación:

22/07/2026

CVE-2026-13192

Fecha de publicación:

22/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attacker to trigger server-side requests to arbitrary hosts, resulting in outbound network connections and potential exposure of Windows authentication credentials.

Gravedad CVSS v3.1: MEDIA

Última modificación:

22/07/2026

CVE-2026-13185

Fecha de publicación:

22/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager or RadDockLayout deserialize attacker-controlled cookie content, allowing unauthenticated remote code execution.

Gravedad CVSS v3.1: ALTA

Última modificación:

24/07/2026

Suscribirse a Vulnerabilidades