Blog de Ciberseguridad y Tecnología

artículos recientes

Vulnerabilidades 02 Sep 2026 · 18:58

CVE-2026-83549: inyección de comandos y RCE en SonicWall SMA1000 Appliances

SonicWall SMA1000 sufre una inyección de comandos del SO (CWE-78, CVSS 7.8) que permite RCE a un atacante autenticado como administrador. CISA la incluyó en el catálogo KEV por explotación activa. Sin workaround: aplicar hotfix urgente.

cve-2026-83549cvevulnerabilidadsonicwallsma1000rcecisa-kevseguridad

leer más 4 min

CVE-2026-9586

Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against t

Sangoma · 2026-09-02

CVE-2026-83549

SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to exec

SonicWall · 2026-09-02

CVE-2026-83548

SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthori

SonicWall · 2026-09-02

CVE-2026-82329

JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with networ

JFrog · 2026-09-02

CVE-2026-59822

BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to

BerriAI · 2026-09-02

ver todos →

CIBERPLANETA