Vulnerabilidades

Con el objetivo de informar, advertir y ayudar a los profesionales sobre las últimas vulnerabilidades de seguridad en sistemas tecnológicos, ponemos a disposición de los usuarios interesados en esta información una base de datos con información en castellano sobre cada una de las últimas vulnerabilidades documentadas y conocidas.

Este repositorio con más de 75.000 registros esta basado en la información de NVD (National Vulnerability Database) – en función de un acuerdo de colaboración – por el cual desde INCIBE realizamos la traducción al castellano de la información incluida. En ocasiones este listado mostrará vulnerabilidades que aún no han sido traducidas debido a que se recogen en el transcurso del tiempo en el que el equipo de INCIBE realiza el proceso de traducción.

Se emplea el estándar de nomenclatura de vulnerabilidades CVE (Common Vulnerabilities and Exposures), con el fin de facilitar el intercambio de información entre diferentes bases de datos y herramientas. Cada una de las vulnerabilidades recogidas enlaza a diversas fuentes de información así como a parches disponibles o soluciones aportadas por los fabricantes y desarrolladores. Es posible realizar búsquedas avanzadas teniendo la opción de seleccionar diferentes criterios como el tipo de vulnerabilidad, fabricante, tipo de impacto entre otros, con el fin de acortar los resultados.

Mediante suscripción RSS o Boletines podemos estar informados diariamente de las últimas vulnerabilidades incorporadas al repositorio.

CVE-2026-15703

Fecha de publicación:

14/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Performing a manipulation of the argument user_id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Gravedad CVSS v4.0: MEDIA

Última modificación:

15/07/2026

CVE-2026-14645

Fecha de publicación:

14/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability&#39;s configured URL before making an outbound HTTP request, allowing a user holding the Capability Administration permission to cause the server to send requests to internal network locations (Server-Side Request Forgery). This permission is granted by role assignment, independent of authentication status, so an unauthenticated user could also trigger this behavior if the anonymous role has been granted the permission.

Gravedad CVSS v4.0: MEDIA

Última modificación:

15/07/2026

CVE-2026-14646

Fecha de publicación:

14/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with read access to a proxy repository backed by an attacker-controlled or compromised upstream server — including an anonymous user, if anonymous access is enabled — could receive a response from an internal network address or cloud metadata endpoint as repository content, potentially exposing sensitive information such as cloud IAM credentials.

Gravedad CVSS v4.0: MEDIA

Última modificación:

15/07/2026

CVE-2026-15429

Fecha de publicación:

14/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data. An authenticated user with sufficient privileges may be able to modify account settings and gain elevated administrative privileges.

Gravedad CVSS v4.0: MEDIA

Última modificación:

06/08/2026

CVE-2026-15428

Fecha de publicación:

14/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain name parameter. An adjacent attacker who can access the relevant HTTP interface can modify the parameter to inject shell metacharacters, resulting in arbitrary code execution with root privileges. Successful exploitation may allow remote code execution and complete compromise of the device.

Gravedad CVSS v4.0: ALTA

Última modificación:

06/08/2026

CVE-2026-15427

Fecha de publicación:

14/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, allowing crafted input to be executed as system-level commands. Exploitation requires specific conditions such as TR-069 being enabled and ability to influence ACS-delivered commands, compromise or control an ACS server. Successful exploitation may allow arbitrary command execution with root privileges, resulting in complete compromise of the device.

Gravedad CVSS v4.0: ALTA

Última modificación:

06/08/2026

CVE-2026-9292

Fecha de publicación:

14/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability stems from improper neutralization of user-supplied input within the Workflows configuration. An authenticated attacker with high privileges can inject malicious scripts that are permanently stored on the server. This vulnerability can result in the execution of malicious JavaScript when other users access the affected page, potentially allowing for account takeover, credential theft, or redirection to a malicious website.

Gravedad CVSS v4.0: ALTA

Última modificación:

14/07/2026

CVE-2026-9636

Fecha de publicación:

14/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue stems from the controller failing to properly reject certificates signed by an intermediate certificate that has been revoked via a Certificate Revocation List (CRL). This could allow a network-based attacker to establish a connection using a certificate that should be untrusted, potentially bypassing CIP Security protections.

Gravedad CVSS v4.0: ALTA

Última modificación:

14/07/2026

CVE-2026-9127

Fecha de publicación:

14/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If exploited, an attacker could alter the configuration to point to a malicious executable, resulting in arbitrary code execution when any user interacts with the external tools functionality.

Gravedad CVSS v4.0: ALTA

Última modificación:

25/08/2026

CVE-2026-9108

Fecha de publicación:

14/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files. The software does not sanitize or validate file names embedded in the ACD file structure during the project opening procedure, allowing path traversal sequences to escape the intended extraction directory. If exploited, an attacker could craft a malicious ACD project file that results in arbitrary files being written to attacker-controlled locations on the file system, potentially leading to code execution.

Gravedad CVSS v4.0: MEDIA

Última modificación:

25/08/2026

CVE-2026-9128

Fecha de publicación:

14/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because these paths contain spaces, the operating system may resolve them to unintended executables placed earlier in the search order. If exploited, an attacker could plant a malicious executable in a location within the search path, resulting in arbitrary code execution with the same permissions of the user running the application.

Gravedad CVSS v4.0: ALTA

Última modificación:

25/08/2026

CVE-2026-60118

Fecha de publicación:

14/07/2026

Idioma:

Inglés

*** Pendiente de traducción *** Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated attackers to purchase hidden tickets by referencing hidden product and price IDs in order creation requests without authorization checks. Attackers can enumerate sequential hidden ticket IDs from visible ones and submit order creation requests referencing those IDs to purchase VIP, invite-only, or discounted tickets intentionally withheld from public sale.

Gravedad CVSS v4.0: MEDIA

Última modificación:

15/07/2026

Suscribirse a Vulnerabilidades