Vulnerabilidades

Con el objetivo de informar, advertir y ayudar a los profesionales sobre las últimas vulnerabilidades de seguridad en sistemas tecnológicos, ponemos a disposición de los usuarios interesados en esta información una base de datos con información en castellano sobre cada una de las últimas vulnerabilidades documentadas y conocidas.

Este repositorio con más de 75.000 registros esta basado en la información de NVD (National Vulnerability Database) – en función de un acuerdo de colaboración – por el cual desde INCIBE realizamos la traducción al castellano de la información incluida. En ocasiones este listado mostrará vulnerabilidades que aún no han sido traducidas debido a que se recogen en el transcurso del tiempo en el que el equipo de INCIBE realiza el proceso de traducción.

Se emplea el estándar de nomenclatura de vulnerabilidades CVE (Common Vulnerabilities and Exposures), con el fin de facilitar el intercambio de información entre diferentes bases de datos y herramientas. Cada una de las vulnerabilidades recogidas enlaza a diversas fuentes de información así como a parches disponibles o soluciones aportadas por los fabricantes y desarrolladores. Es posible realizar búsquedas avanzadas teniendo la opción de seleccionar diferentes criterios como el tipo de vulnerabilidad, fabricante, tipo de impacto entre otros, con el fin de acortar los resultados.

Mediante suscripción RSS o Boletines podemos estar informados diariamente de las últimas vulnerabilidades incorporadas al repositorio.

CVE-2026-50643

Fecha de publicación:

18/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** 8cc is vulnerable to an Out‑of‑Bounds Read due to improper handling of #line directives and GNU linemarkers. The compiler accepts attacker-controlled filename and line number metadata and later uses it without validation when accessing source line arrays.<br /> By supplying invalid or oversized line numbers, an attacker can trigger out-of-bounds memory access and a crash.<br /> <br /> Maintainer of this project was notified early about this vulnerability, but didn&#39;t respond with the details of vulnerability or vulnerable version range. Version corresponding to the commit b480958 was tested and confirmed as vulnerable, other versions were not tested but might also be vulnerable.

Gravedad CVSS v4.0: MEDIA

Última modificación:

22/06/2026

CVE-2025-10560

Fecha de publicación:

18/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** Worksnaps before version 1.6.20260201 contains hardcoded cloud credentials and related secret material in the Worksnaps client application binaries. The exposed credentials included AWS access keys, S3 bucket names, and related cloud access information. The originally exposed AWS credentials authenticated as the AWS account root identity and provided access to Worksnaps production cloud resources, including S3 buckets containing sensitive data such as screenshots of user desktops. An attacker with access to the affected client binaries could extract or recover the credentials and use them to access affected Worksnaps cloud resources.

Gravedad CVSS v4.0: CRÍTICA

Última modificación:

23/06/2026

CVE-2026-55742

Fecha de publicación:

18/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the administration rights handler. In system/admin/admin.rights.php, the rights update action (&#39;a=update&#39;) modifies group access rights (including via cot_auth_add_group) without calling cot_check_xg() to validate the anti-CSRF token. A remote attacker who lures an authenticated administrator into visiting a malicious page can force the browser to submit a forged request that grants elevated permissions to an attacker-controlled group, escalating privileges to administrator. Because Cotonti administrators can modify templates and configuration, this can be further leveraged toward remote code execution.

Gravedad CVSS v4.0: CRÍTICA

Última modificación:

22/06/2026

CVE-2026-55744

Fecha de publicación:

18/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the Personal File Storage (PFS) module. In modules/pfs/inc/pfs.main.php, the file upload action (&#39;a=upload&#39;) processes uploaded files without calling cot_check_xg() to validate the anti-CSRF token, even though sibling actions such as &#39;delete&#39; (line 272) do. A remote attacker who lures an authenticated user into visiting a malicious page can force the browser to submit a forged multipart request that uploads arbitrary files into the victim&#39;s PFS storage.

Gravedad CVSS v4.0: ALTA

Última modificación:

22/06/2026

CVE-2026-55745

Fecha de publicación:

18/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the Personal File Storage (PFS) module. In modules/pfs/inc/pfs.editfolder.php, the folder update action (&#39;a=update&#39;) updates folder metadata (title, description, public/gallery flags) without calling cot_check_xg() to validate the anti-CSRF token. A remote attacker who lures an authenticated user into visiting a malicious page can force the browser to submit a forged request that modifies the victim&#39;s folder metadata, including making a private folder public.

Gravedad CVSS v4.0: MEDIA

Última modificación:

22/06/2026

CVE-2026-55746

Fecha de publicación:

18/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to stored Cross-Site Scripting in the Personal File Storage (PFS) module. A folder title (pff_title) is imported with the &#39;TXT&#39; filter, which does not strip or encode HTML (the tag check in cot_import is disabled), so an authenticated user can store HTML/JavaScript in a folder title. In modules/pfs/inc/pfs.main.php the title is assigned to the template variable PFF_ROW_TITLE without htmlspecialchars(), and modules/pfs/tpl/pfs.tpl outputs {PFF_ROW_TITLE} unescaped. When the folder listing is viewed (including by other users for public folders), the injected script executes in the victim&#39;s browser.

Gravedad CVSS v4.0: ALTA

Última modificación:

22/06/2026

CVE-2026-9815

Fecha de publicación:

18/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** The MagicForm WordPress plugin through 0.1.3 does not properly validate the type of files uploaded through an unauthenticated AJAX action when a form&#39;s per-field extension allowlist is left empty, allowing unauthenticated attackers to upload PHP files and execute arbitrary code on the server.

Gravedad CVSS v3.1: MEDIA

Última modificación:

22/06/2026

CVE-2026-55741

Fecha de publicación:

18/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the administration configuration handler. In system/admin/admin.config.php, the configuration update action (&#39;a=update&#39;) processes POST data via cot_config_update_options() without calling cot_check_xg() to validate the anti-CSRF token (the &#39;x&#39; parameter), unlike other admin handlers (e.g. admin.structure.php, admin.cache.php). A remote attacker who lures an authenticated administrator into visiting a malicious page can force the browser to submit a forged request that modifies arbitrary core, module, or plugin configuration options, which can be leveraged to weaken security or enable further compromise.

Gravedad CVSS v4.0: ALTA

Última modificación:

22/06/2026

CVE-2026-28573

Fecha de publicación:

18/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Gravedad CVSS v4.0: CRÍTICA

Última modificación:

22/06/2026

CVE-2026-55740

Fecha de publicación:

18/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad) contains an unauthenticated SQL injection vulnerability in bus_info.php. The busid parameter received via HTTP POST is concatenated directly into a MySQL query (select * from bus_info where id=$busid) without sanitization, escaping, or parameterization, and in a numeric (unquoted) context. A remote, unauthenticated attacker can inject arbitrary SQL — for example a UNION-based payload such as busid=-1 UNION SELECT 1,2,3,4,5,6 — to read arbitrary data from the bus_service database. The application connects to the database as the MySQL root account with an empty password, increasing the potential impact. The query is executed via mysqli_query(), which does not permit stacked (semicolon-separated) statements.

Gravedad CVSS v4.0: CRÍTICA

Última modificación:

22/06/2026

CVE-2026-12505

Fecha de publicación:

18/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker&#39;s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.

Gravedad CVSS v3.1: ALTA

Última modificación:

29/07/2026

CVE-2026-12569

Fecha de publicación:

18/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions<br /> * The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030

Gravedad CVSS v4.0: CRÍTICA

Última modificación:

01/08/2026

Suscribirse a Vulnerabilidades