Vulnerabilidades

Con el objetivo de informar, advertir y ayudar a los profesionales sobre las últimas vulnerabilidades de seguridad en sistemas tecnológicos, ponemos a disposición de los usuarios interesados en esta información una base de datos con información en castellano sobre cada una de las últimas vulnerabilidades documentadas y conocidas.

Este repositorio con más de 75.000 registros esta basado en la información de NVD (National Vulnerability Database) – en función de un acuerdo de colaboración – por el cual desde INCIBE realizamos la traducción al castellano de la información incluida. En ocasiones este listado mostrará vulnerabilidades que aún no han sido traducidas debido a que se recogen en el transcurso del tiempo en el que el equipo de INCIBE realiza el proceso de traducción.

Se emplea el estándar de nomenclatura de vulnerabilidades CVE (Common Vulnerabilities and Exposures), con el fin de facilitar el intercambio de información entre diferentes bases de datos y herramientas. Cada una de las vulnerabilidades recogidas enlaza a diversas fuentes de información así como a parches disponibles o soluciones aportadas por los fabricantes y desarrolladores. Es posible realizar búsquedas avanzadas teniendo la opción de seleccionar diferentes criterios como el tipo de vulnerabilidad, fabricante, tipo de impacto entre otros, con el fin de acortar los resultados.

Mediante suscripción RSS o Boletines podemos estar informados diariamente de las últimas vulnerabilidades incorporadas al repositorio.

CVE-2026-27675

Fecha de publicación:

14/04/2026

Idioma:

Inglés

*** Pendiente de traducción *** SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a low impact on integrity, while confidentiality and availability are not impacted.

Gravedad CVSS v3.1: BAJA

Última modificación:

17/04/2026

CVE-2026-27676

Fecha de publicación:

14/04/2026

Idioma:

Inglés

*** Pendiente de traducción *** Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Technical Object Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability results in a low impact on integrity, while confidentiality and availability are not impacted.

Gravedad CVSS v3.1: MEDIA

Última modificación:

17/04/2026

CVE-2026-24318

Fecha de publicación:

14/04/2026

Idioma:

Inglés

*** Pendiente de traducción *** Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session tokens and reuse them to gain unauthorized access to a victim�s session. If the application continues to accept previously issued tokens after authentication, the attacker could assume the victim�s authenticated context. This could allow the attacker to access or modify information within the victim�s session scope, impacting confidentiality and integrity, while availability remains unaffected.

Gravedad CVSS v3.1: MEDIA

Última modificación:

17/04/2026

CVE-2026-0512

Fecha de publicación:

14/04/2026

Idioma:

Inglés

*** Pendiente de traducción *** Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL, that if accessed by a victim, results in execution of malicious content within the victim&#39;s browser. This could allow the attacker to access and modify information, impacting the confidentiality and integrity of the application, while availability remains unaffected.

Gravedad CVSS v3.1: MEDIA

Última modificación:

17/04/2026

CVE-2026-6203

Fecha de publicación:

13/04/2026

Idioma:

Inglés

*** Pendiente de traducción *** The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4. This is due to insufficient validation of user-supplied URLs passed via the &#39;redirect_to_on_logout&#39; GET parameter before redirecting users. The `redirect_to_on_logout` GET parameter is passed directly to WordPress&#39;s `wp_redirect()` function instead of the domain-restricted `wp_safe_redirect()`. While `esc_url_raw()` is applied to sanitize malformed URLs, it does not restrict the redirect destination to the local domain, allowing an attacker to craft a specially formed link that redirects users to potentially malicious external URLs after logout, which could be used to facilitate phishing attacks.

Gravedad CVSS v3.1: MEDIA

Última modificación:

22/04/2026

CVE-2026-39956

Fecha de publicación:

13/04/2026

Idioma:

Inglés

*** Pendiente de traducción *** jq is a command-line JSON processor. In commits after 69785bf77f86e2ea1b4a20ca86775916889e91c9, the _strindices builtin in jq&#39;s src/builtin.c passes its arguments directly to jv_string_indexes() without verifying they are strings, and jv_string_indexes() in src/jv.c relies solely on assert() checks that are stripped in release builds compiled with -DNDEBUG. This allows an attacker to crash jq trivially with input like _strindices(0), and by crafting a numeric value whose IEEE-754 bit pattern maps to a chosen pointer, achieve a controlled pointer dereference and limited memory read/probe primitive. Any deployment that evaluates untrusted jq filters against a release build is vulnerable. This issue has been patched in commit fdf8ef0f0810e3d365cdd5160de43db46f57ed03.

Gravedad CVSS v3.1: MEDIA

Última modificación:

21/04/2026

CVE-2026-39979

Fecha de publicación:

13/04/2026

Idioma:

Inglés

*** Pendiente de traducción *** jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jv_parse_sized() API in libjq accepts a counted buffer with an explicit length parameter, but its error-handling path formats the input buffer using %s in jv_string_fmt(), which reads until a NUL terminator is found rather than respecting the caller-supplied length. This means that when malformed JSON is passed in a non-NUL-terminated buffer, the error construction logic performs an out-of-bounds read past the end of the buffer. The vulnerability is reachable by any libjq consumer calling jv_parse_sized() with untrusted input, and depending on memory layout, can result in memory disclosure or process termination. The issue has been patched in commit 2f09060afab23fe9390cce7cb860b10416e1bf5f.

Gravedad CVSS v4.0: MEDIA

Última modificación:

23/04/2026

CVE-2026-5086

Fecha de publicación:

13/04/2026

Idioma:

Inglés

*** Pendiente de traducción *** Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks.<br /> <br /> For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in timing could be used to guess the secret password.

Gravedad CVSS v3.1: ALTA

Última modificación:

06/05/2026

CVE-2026-40312

Fecha de publicación:

13/04/2026

Idioma:

Inglés

*** Pendiente de traducción *** ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decoder could result in a crash when a malicous MSL file is read. This issue has been fixed in version 7.1.2-19.

Gravedad CVSS v3.1: MEDIA

Última modificación:

17/04/2026

CVE-2026-6220

Fecha de publicación:

13/04/2026

Idioma:

Inglés

*** Pendiente de traducción *** A vulnerability was identified in HummerRisk up to 1.5.0. This vulnerability affects the function ServerService.addServer of the file ServerService.java of the component Video File Download URL Handler. Such manipulation of the argument streamIp leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Gravedad CVSS v4.0: BAJA

Última modificación:

29/04/2026

CVE-2026-6224

Fecha de publicación:

13/04/2026

Idioma:

Inglés

*** Pendiente de traducción *** A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. This issue affects the function createSafeConsole of the file packages/plugins/@nocobase/plugin-workflow-javascript/src/server/Vm.js. Performing a manipulation results in sandbox issue. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Gravedad CVSS v4.0: MEDIA

Última modificación:

29/04/2026

CVE-2026-4786

Fecha de publicación:

13/04/2026

Idioma:

Inglés

*** Pendiente de traducción *** Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.

Gravedad CVSS v4.0: ALTA

Última modificación:

29/04/2026

Suscribirse a Vulnerabilidades