Vulnerabilidades

Con el objetivo de informar, advertir y ayudar a los profesionales sobre las últimas vulnerabilidades de seguridad en sistemas tecnológicos, ponemos a disposición de los usuarios interesados en esta información una base de datos con información en castellano sobre cada una de las últimas vulnerabilidades documentadas y conocidas.

Este repositorio con más de 75.000 registros esta basado en la información de NVD (National Vulnerability Database) – en función de un acuerdo de colaboración – por el cual desde INCIBE realizamos la traducción al castellano de la información incluida. En ocasiones este listado mostrará vulnerabilidades que aún no han sido traducidas debido a que se recogen en el transcurso del tiempo en el que el equipo de INCIBE realiza el proceso de traducción.

Se emplea el estándar de nomenclatura de vulnerabilidades CVE (Common Vulnerabilities and Exposures), con el fin de facilitar el intercambio de información entre diferentes bases de datos y herramientas. Cada una de las vulnerabilidades recogidas enlaza a diversas fuentes de información así como a parches disponibles o soluciones aportadas por los fabricantes y desarrolladores. Es posible realizar búsquedas avanzadas teniendo la opción de seleccionar diferentes criterios como el tipo de vulnerabilidad, fabricante, tipo de impacto entre otros, con el fin de acortar los resultados.

Mediante suscripción RSS o Boletines podemos estar informados diariamente de las últimas vulnerabilidades incorporadas al repositorio.

CVE-2026-34030

Fecha de publicación:

15/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, does not sufficiently validate the branch code when a new branch is created. The branch code is later used in multiple application functions, including filesystem path generation for uploaded files, profile pictures, and settings. An authenticated attacker with the settings_branches_manage privilege can include path traversal sequences in the branch code and influence the final filesystem location used by affected file operations. This can allow files to be stored in unintended locations, subject to service-account write permissions and branch-code length restrictions.

Gravedad CVSS v4.0: MEDIA

Última modificación:

15/06/2026

CVE-2026-5482

Fecha de publicación:

15/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** Responsive FileManager&#39;s allows an unauthenticated attacker to upload files of any type and extension without restriction using dialog.php endpoint, leading to Remote Code Execution. This project is unmaintained at the time of CVE assignment. The vulnerability was found in the latest release 9.14.0

Gravedad CVSS v4.0: CRÍTICA

Última modificación:

16/06/2026

CVE-2026-34021

Fecha de publicación:

15/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses RS-485 communication between the server and the microcontroller without cryptographic protection. An attacker with access to the communication path between the server and the microcontroller can sniff RS-485 messages and replay previously observed messages. This can be used, for example, to spoof a "quit alarm" message and continuously deactivate the safe alarm.

Gravedad CVSS v4.0: ALTA

Última modificación:

15/06/2026

CVE-2026-34022

Fecha de publicación:

15/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** The Wertheim SafeController Family 65000, Controller 65000 - AssemblyVersion 6.11.8130.22319, uses weak custom cryptographic algorithms with hard-coded cryptographic keys to protect communication. An attacker in an adversary-in-the-middle position can decrypt the data traffic. During reassessment, it was possible to break the encryption/decryption routine and decrypt messages without knowledge of the encryption key. It was also possible to gain knowledge about the encryption key by intercepting enough messages.

Gravedad CVSS v4.0: ALTA

Última modificación:

15/06/2026

CVE-2026-34023

Fecha de publicación:

15/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an incorrect authorization vulnerability in the WebSocket communication used by the SafeController WebMessageBroker. An authenticated attacker with valid low-privileged branch user credentials can manipulate WebSocket messages by specifying controller identifiers belonging to other branches. This allows the attacker to access restricted functions and resources in other branches, including activating boxes outside of the user&#39;s authorized branch.

Gravedad CVSS v4.0: ALTA

Última modificación:

15/06/2026

CVE-2026-34024

Fecha de publicación:

15/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenticated attacker with minimal privileges can access endpoints that are not visible in the frontend but remain directly reachable. This allows the attacker to perform restricted actions such as switching the user&#39;s branch, uploading arbitrary files, downloading arbitrary files, and viewing details of arbitrary branches.

Gravedad CVSS v4.0: ALTA

Última modificación:

15/06/2026

CVE-2026-34025

Fecha de publicación:

15/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application restricts user logins based on the IP address associated with a branch location, but the client IP address is derived from the HTTP X-Forwarded-For header when that header is present. An attacker with valid branch user credentials can manipulate the X-Forwarded-For header during login to spoof the expected branch IP address and obtain a valid authenticated session from an unauthorized network location.

Gravedad CVSS v4.0: MEDIA

Última modificación:

15/06/2026

CVE-2026-12057

Fecha de publicación:

15/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arbitrary code execution.

Gravedad CVSS v3.1: ALTA

Última modificación:

16/06/2026

CVE-2026-44188

Fecha de publicación:

15/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** A flaw was found in Ansible Lightspeed. This vulnerability, related to insufficient session expiration, allows a remote attacker to maintain persistent access to the Ansible Lightspeed instance. If an attacker exfiltrates a valid OAuth (Open Authorization) access token before a user logs out, they can continue to authenticate and access sensitive data. This is because the application fails to invalidate the token on the backend, leaving it valid until its natural expiration. This can lead to unauthorized read access to Ansible resources such as inventories, playbooks, and configuration data.

Gravedad CVSS v3.1: MEDIA

Última modificación:

15/06/2026

CVE-2026-50100

Fecha de publicación:

15/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is exploited, an attacker who can log in to a computer running an affected printer driver could elevate privileges by using a specially crafted driver.

Gravedad CVSS v4.0: ALTA

Última modificación:

16/06/2026

CVE-2026-11860

Fecha de publicación:

15/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** Quick.CMS deserializes user-controlled data received over plaintext HTTP without ensuring integrity or authenticity. This allows attackers to tamper with serialized payloads in transit and inject malicious objects. Because deserialization is performed without proper validation or class restrictions, crafted payloads can trigger dangerous magic methods (e.g., __wakeup() and __destruct()) and leverage gadget chains, resulting in arbitrary code execution. Exploitation is triggered automatically when an administrator accesses the admin panel. When successfully exploited, this vulnerability allows attackers to execute arbitrary code on the server via manipulated serialized data transmitted over an unprotected channel. This issue was mitigated by limiting the communication to HTTPS in a patch for version 6.8 published on 14.05.2026, deployments without this patch remain vulnerable.

Gravedad CVSS v4.0: ALTA

Última modificación:

15/06/2026

CVE-2026-8386

Fecha de publicación:

15/06/2026

Idioma:

Inglés

*** Pendiente de traducción *** The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticated users to retrieve marker records that an administrator has not yet approved for public display, including any PII placed in the address and description fields and the marker&#39;s geographic coordinates.

Gravedad CVSS v3.1: MEDIA

Última modificación:

15/06/2026

Suscribirse a Vulnerabilidades