Actualizado hace 1 min
Lo último sobre vulnerabilidades en los medios de ciberseguridad en castellano. Clasificamos cada nota automáticamente y la enlazamos a su fuente original.
184 notas en castellano e inglés. Quitar filtros
View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm <=v26.07.1 (CVE-2026-107336, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334) Malcolm <=v26.08.0 (CVE-2026-107333, CVE-2026-107362) CVSS Vendor Equipment v3 8.1 CISA Malcolm 6…
Múltiples vulnerabilidades en productos de Mitsubishi Electric Jue, 15/10/2026 - 09:40 Aviso SCI Recursos Afectados GENESIS, versiones 11.03 y anteriores.GENESIS64, versiones comprendidas entre la 10.97 y la 10.97.2 para CVE-2023-4863, y versiones 10.97.3 y anteriores para el…
La noticia de los frigoríficos hakeados ha dado la vuelta al mundo, y a la gente le llama la atención que algo así haya sucedido. La explicación es tan sencilla como sabemos desde hace muchos años. Un producto End of Life, es decir, fuera de soporte y mantenimiento, no tiene…
VulnerabilidadesExploits y PoC
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware.
VulnerabilidadesInfraestructura crítica
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
VulnerabilidadesInfraestructura crítica
ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability.
VulnerabilidadesExploits y PoC
OverviewWhile performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065, an SQL Injection vulnerability (CWE-89) in Channel Software WebAlliance eCommerce.The exploit allows a malicious actor to read sensitive data…
VulnerabilidadesExploits y PoC
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal…
Múltiples vulnerabilidades en 1732E ArmorBlock I/O de Rockwell Automation Mié, 14/10/2026 - 09:18 Aviso SCI Recursos Afectados 1732E ArmorBlock I/O, versión 3.012 y anteriores:Afectados por CVE-2026-12655 y CVE-2026-12656: 1732E-IB16M12R, 1732E-OB16M12R, 1732E-16CFGM12R,…
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from…
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.
Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has…
Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical."
Another month of patches equals another new record for Microsoft patches. It’s a good thing I survive Pwn2Own Ireland, because between these and the Adobe patches, there’s much to discuss. I’m also looking at different ways I can represent the bugs at this level of volume, so…
VulnerabilidadesExploits y PoC
OverviewOn October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker…
IA y seguridadVulnerabilidades
TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from…
VulnerabilidadesExploits y PoC
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass…
VulnerabilidadesExploits y PoC
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication. The following versions of Swann Communications SWIFI-SE2KIC are affected: SWIFI-SE2KIC firmware <=2.0.22 (CVE-2026-107605,…
VulnerabilidadesExploits y PoC
View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level. The following versions of Inductive Automation Ignition Software are affected: Ignition >=8.1.0|<=8.1.54 (CVE-2026-92817)…
OverviewOn October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability…
Boletín mensual de seguridad de Siemens de octubre de 2026 Mar, 13/10/2026 - 12:11 Aviso SCI Recursos Afectados Las vulnerabilidades afectan a diferentes versiones de los siguientes productos:Capital Embedded AR Classic 431-422, todas las versiones, y R20-11, anteriores a…
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Before we begin, yes - it's confusing. There are more vulnerabilities with watchTowr IDs in this blog post than there are CVE IDs (assigned by PaperCut), due to PaperCut bundling vulnerabilities and then patch bypasses for those same vulnerabilities into singular CVE IDs.Paper!…
