Blog de Ciberseguridad y Tecnología

artículos recientes

Vulnerabilidades 10 Nov 2026 · 20:23

CVE-2026-124194: suplantación por falta de interacción del usuario en Microsoft Office Outlook

CISA añade al catálogo KEV el CVE-2026-124194 (CVSS 6.5) en Microsoft Office Outlook: permite suplantación remota por falta de confirmación del usuario. Explotación activa; plazo FCEB 24-11-2026.

cve-2026-124194cvevulnerabilidadmicrosoftoutlookkevseguridad

leer más 2 min

CVE-2026-20320

Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker

Cisco · 2026-11-10

CVE-2026-125350

Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the s

Google · 2026-11-10

CVE-2026-124194

Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perfo

Microsoft · 2026-11-10

CVE-2026-116606

Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticat

Barracuda Networks · 2026-11-10

CVE-2026-111793

Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticat

Openwave Messaging Limited · 2026-11-10

ver todos →

CIBERPLANETA