Blog de Ciberseguridad y Tecnología

artículos recientes

Vulnerabilidades 11 Sep 2026 · 18:58

CVE-2026-42018: Exposición de token anónimo en JFrog Artifactory

Análisis técnico de CVE-2026-42018 (CVSS 7.5, ALTA): JFrog Artifactory puede devolver un token de usuario anónimo interno a un solicitante no autenticado incluso con el acceso anónimo deshabilitado. Ya en el catálogo CISA KEV (explotación activa).

cve-2026-42018cvevulnerabilidadjfrogartifactorycisa-kevseguridad

leer más 4 min

CVE-2026-85706

GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files du

GitLab · 2026-09-11

CVE-2026-84869

ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to file tr

ConnectWise · 2026-09-11

CVE-2026-42018

JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller wh

JFrog · 2026-09-11

CVE-2026-42016

JFrog Artifactory contains an incorrect authorization vulnerability that allows leads to privilege escalation attack due to a validation check of the

JFrog · 2026-09-11

CVE-2026-86060

MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacked to change the trusted

MikroTik · 2026-09-10

ver todos →

CIBERPLANETA