Blog de Ciberseguridad y Tecnología

artículos recientes

Vulnerabilidades 26 Sep 2026 · 16:02

WordPress corrige CVE-2026-87902: falla crítica explotada permite RCE sin autenticación

CVE-2026-87902 (CVSS 9,2) afecta WordPress y ya registra explotación activa. Puede derivar en RCE sin autenticación bajo condiciones específicas. Actualice y revise sus servidores.

wordpresscve-2026-87902cisa kevrcevulnerabilidadseguridad web

leer más 4 min

CVE-2026-87902

WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a

WordPress · 2026-09-25

CVE-2026-67279

Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session c

MikroTik · 2026-09-25

CVE-2026-65660

Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.

Microsoft · 2026-09-25

CVE-2026-71362

Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain eleva

Adobe · 2026-09-24

CVE-2026-5430

WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file

WSO2 · 2026-09-24

ver todos →

CIBERPLANETA