Vulnerabilidades

Con el objetivo de informar, advertir y ayudar a los profesionales sobre las últimas vulnerabilidades de seguridad en sistemas tecnológicos, ponemos a disposición de los usuarios interesados en esta información una base de datos con información en castellano sobre cada una de las últimas vulnerabilidades documentadas y conocidas.

Este repositorio con más de 75.000 registros esta basado en la información de NVD (National Vulnerability Database) – en función de un acuerdo de colaboración – por el cual desde INCIBE realizamos la traducción al castellano de la información incluida. En ocasiones este listado mostrará vulnerabilidades que aún no han sido traducidas debido a que se recogen en el transcurso del tiempo en el que el equipo de INCIBE realiza el proceso de traducción.

Se emplea el estándar de nomenclatura de vulnerabilidades CVE (Common Vulnerabilities and Exposures), con el fin de facilitar el intercambio de información entre diferentes bases de datos y herramientas. Cada una de las vulnerabilidades recogidas enlaza a diversas fuentes de información así como a parches disponibles o soluciones aportadas por los fabricantes y desarrolladores. Es posible realizar búsquedas avanzadas teniendo la opción de seleccionar diferentes criterios como el tipo de vulnerabilidad, fabricante, tipo de impacto entre otros, con el fin de acortar los resultados.

Mediante suscripción RSS o Boletines podemos estar informados diariamente de las últimas vulnerabilidades incorporadas al repositorio.

CVE-2026-70561

Fecha de publicación:

07/08/2026

Idioma:

Inglés

*** Pendiente de traducción *** TestLink 1.9.20 and prior contains an insecure direct object reference vulnerability that allows any authenticated user, including low-privilege guest accounts, to read arbitrary attachments by supplying an integer attachment ID to the attachmentdownload.php handler without any project or role authorization check. Attackers can enumerate sequential integer IDs through the attachment download endpoint to retrieve file contents from private projects they have no membership in, bypassing the per-project access control model and exposing test specifications, requirements documents, execution evidence, and other sensitive uploaded files across the entire installation.

Gravedad CVSS v4.0: ALTA

Última modificación:

07/08/2026

CVE-2026-71847

Fecha de publicación:

07/08/2026

Idioma:

Inglés

*** Pendiente de traducción *** Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby&#39;s JSON native C extension clears the consumed JSON::ResumableParser input buffer but leaves state.start, state.cursor, and state.end pointing into released storage. When partial_value reconstructs an incomplete object containing duplicate keys, the duplicate-key warning path calls cursor_position, which dereferences those stale pointers. This results in a heap-use-after-free and can terminate the Ruby process. An attacker who can supply JSON stream data to an application using JSON::ResumableParser may cause process termination when the application calls partial_value on incomplete attacker-controlled input containing duplicate object keys. This issue has been fixed in version 2.21.2.

Gravedad CVSS v4.0: ALTA

Última modificación:

07/08/2026

CVE-2026-71848

Fecha de publicación:

07/08/2026

Idioma:

Inglés

*** Pendiente de traducción *** Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags. To implement progressive language tag truncation, normalizeLanguage() repeatedly calls parts.slice(0, i).join(&#39;-&#39;) for every possible prefix, so the total amount of string processing grows quadratically with the number of subtags. Language values may come from a query parameter, cookie, Accept-Language header, or URL path, depending on the detector configuration, and the default detector order enables query string, cookie, and header detection, so applications using languageDetector() may expose this processing to unauthenticated requests. An attacker may repeatedly send requests containing long, hyphen separated language tags, causing excessive CPU consumption and preventing unrelated requests from being processed. This issue is fixed in version 4.12.34.

Gravedad CVSS v3.1: MEDIA

Última modificación:

07/08/2026

CVE-2026-66000

Fecha de publicación:

07/08/2026

Idioma:

Inglés

*** Pendiente de traducción *** Frappe is a full-stack web application framework. Prior to 16.23.0 and 15.112.0, Document Follow notification generation does not re-evaluate the recipient&#39;s current document permissions, allowing users whose access was revoked or reduced to continue receiving document data by email. This issue is fixed in versions 16.23.0 and 15.112.0.

Gravedad CVSS v4.0: BAJA

Última modificación:

07/08/2026

CVE-2026-48098

Fecha de publicación:

07/08/2026

Idioma:

Inglés

*** Pendiente de traducción *** NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user&#39;s IP address. Versions prior to 2.0.0 execute privileged system commands using `sudo` and `shell=True` directly inside application logic. In environments where passwordless sudo (`NOPASSWD`) is enabled, privileged commands may execute silently without explicit user confirmation. Version 2.0.0 fixes the issue.

Gravedad CVSS v3.1: ALTA

Última modificación:

07/08/2026

CVE-2026-48097

Fecha de publicación:

07/08/2026

Idioma:

Inglés

*** Pendiente de traducción *** NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user&#39;s IP address. Versions prior to 2.0.0 have a command execution vulnerability due to unsafe use of `shell=True` with commands that rely on executable resolution through the `PATH` environment variable. An attacker controlling the execution environment can place malicious executables such as sudo earlier in the `PATH`, resulting in execution of attacker-controlled code. Version 2.0.0 fixes the issue.

Gravedad CVSS v3.1: ALTA

Última modificación:

07/08/2026

CVE-2026-19230

Fecha de publicación:

07/08/2026

Idioma:

Inglés

*** Pendiente de traducción *** A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=save_upload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.

Gravedad CVSS v4.0: BAJA

Última modificación:

07/08/2026

CVE-2026-19231

Fecha de publicación:

07/08/2026

Idioma:

Inglés

*** Pendiente de traducción *** A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=delete_appointment. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Gravedad CVSS v4.0: MEDIA

Última modificación:

07/08/2026

CVE-2026-17435

Fecha de publicación:

07/08/2026

Idioma:

Inglés

*** Pendiente de traducción *** File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When the file to be rotated is a symbolic link to a missing file, and the touch option is enabled, then the rotate method assumes that the file is absent (since the existence check is against the target), and does not rotate it. But it touches the file, which creates the target. An attacker that has the ability to create the symlink can use this to create an arbitrary file with permissions of the process rotating the files (which may be different from the process that normally writes to the log file that is being rotated). Note that the touch option is disabled by default.

Gravedad: Pendiente de análisis

Última modificación:

07/08/2026

CVE-2025-71411

Fecha de publicación:

07/08/2026

Idioma:

Inglés

*** Pendiente de traducción *** Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency.

Gravedad CVSS v4.0: MEDIA

Última modificación:

07/08/2026

CVE-2025-71412

Fecha de publicación:

07/08/2026

Idioma:

Inglés

*** Pendiente de traducción *** Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency.

Gravedad CVSS v4.0: ALTA

Última modificación:

07/08/2026

CVE-2025-71413

Fecha de publicación:

07/08/2026

Idioma:

Inglés

*** Pendiente de traducción *** Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets which may result in increased workload and reduced situational awareness. This type of attack can be carried out remotely over radio frequency.

Gravedad CVSS v4.0: MEDIA

Última modificación:

07/08/2026

Suscribirse a Vulnerabilidades