Blog de Ciberseguridad y Tecnología

artículos recientes

Vulnerabilidades 18 Jun 2026 · 01:57

CVE-2026-48907: Vulnerabilidad Crítica en Joomla Content Editor Permite Ejecución de Código PHP sin Autenticación

CVE-2026-48907 en Joomla Content Editor permite subida y ejecución de PHP sin autenticación. CVSS 9.8. Activamente explotada. Parchea ahora.

cve-2026-48907cvevulnerabilidadwidget-factoryseguridad

leer más 5 min

CVE-2026-48907

Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the

Widget Factory · 2026-06-16

CVE-2026-54420

LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shar

LiteSpeed · 2026-06-15

CVE-2026-20262

Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a file

Cisco · 2026-06-15

CVE-2026-35273

Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated at

Oracle · 2026-06-12

CVE-2026-10520

Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to

Ivanti · 2026-06-11

ver todos →

CIBERPLANETA