CIBERPLANETA_

THREAT_INTEL //
Boletines de Seguridad

Alertas de seguridad, IOC y recomendaciones actualizadas. 1 boletines publicados.

🔴 CRÍTICA 02 Sep 2026

CVE-2026-49869

Alerta de Seguridad: Kestra OSS - RCE no autenticado (CVE-2026-49869)

CVE-2026-49869 (CVSS 10.0): bypass de autenticacion en Kestra OSS <=1.3.20 permite RCE no autenticado como root. En CISA KEV. Limite FCEB 2026-09-05. Parche: 1.3.21/1.0.45.

Ver IOCs completos →

CVE-2026-9586

Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against t

Sangoma · 2026-09-02

CVE-2026-83549

SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to exec

SonicWall · 2026-09-02

CVE-2026-83548

SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthori

SonicWall · 2026-09-02

CVE-2026-82329

JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with networ

JFrog · 2026-09-02

CVE-2026-59822

BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to

BerriAI · 2026-09-02

ver todos →

▶

[INFO] CVE-2026-48710: HTTP Request Smuggling en Kludex Starlette · [INFO] CVE-2026-49869: RCE no autenticado en Kestra OSS por bypass de autenticacion · [INFO] CVE-2026-83549: inyección de comandos y RCE en SonicWall SMA1000 Appliances · [INFO] CVE-2026-83548: SSRF preautenticada crítica en SonicWall SMA1000 Appliances · [INFO] CVE-2026-9586: Inyección SQL no autenticada con RCE en Sangoma Switchvox · [INFO] CVE-2026-48710: HTTP Request Smuggling en Kludex Starlette · [INFO] CVE-2026-49869: RCE no autenticado en Kestra OSS por bypass de autenticacion · [INFO] CVE-2026-83549: inyección de comandos y RCE en SonicWall SMA1000 Appliances · [INFO] CVE-2026-83548: SSRF preautenticada crítica en SonicWall SMA1000 Appliances · [INFO] CVE-2026-9586: Inyección SQL no autenticada con RCE en Sangoma Switchvox ·