Blog de Ciberseguridad y Tecnología

artículos recientes

Vulnerabilidades 20 Oct 2026 · 20:23

CVE-2026-96652: SSRF explotada activamente en Plex Media Server

CISA incorporó CVE-2026-96652 al catálogo KEV por explotación activa. La falla SSRF permite forzar a Plex Media Server a enviar solicitudes POST a destinos elegidos por un atacante que use cualquier valor X-Plex-Token.

cve-2026-96652cvevulnerabilidadplexmedia-serverssrfseguridadcisa-kev

leer más 5 min

CVE-2026-96656

Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be e

Plex · 2026-10-20

CVE-2026-96655

Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or

Plex · 2026-10-20

CVE-2026-96654

Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other pl

Plex · 2026-10-20

CVE-2026-96652

Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a

Plex · 2026-10-20

CVE-2026-110936

Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a special

Siemens · 2026-10-20

ver todos →

CIBERPLANETA