#ciberseguridad
Latest news about Ciberseguridad: context, sources and what to do.
60 articles
Discover technical details about CVE-2026-58879, a critical CVSS 8.4 vulnerability involving out-of-bounds writes and local privilege escalation.
Analyze CVE-2026-58979, a critical CVSS 8.4 permission bypass vulnerability in Android PresentationController.java enabling local privilege escalation.
AI pioneer Geoffrey Hinton warns humanity might have been better off without artificial intelligence, citing severe systemic risks and lack of tech oversight.
Discover CVE-2026-95731, a critical CVSS 9.8 vulnerability in HPE Networking Fabric Composer caused by hardcoded passwords.
Discover details about CVE-2026-115231, a high-severity memory corruption vulnerability in Eclipse ThreadX affecting module communication.
Analizamos la vulnerabilidad CVE-2026-108047 en Alosuite con CVSS 8.6, un fallo crítico de autorización que permite la escalada de privilegios administrativos.
Discover CVE-2026-119675, an 8.6 CVSS vulnerability in MongoDB Database Tools mongorestore allowing unauthorized root account creation.
Analyze CVE-2026-115215, a CVSS 8.7 vulnerability in Eclipse ThreadX NetX Duo affecting DTLS session pools and causing denial of service.
Discover CWE-bench v2 by Collinear AI, featuring 100 tasks across 91 CWEs to evaluate language models in cybersecurity with programmatic scoring.
Discover CVE-2026-103916, a critical CVSS 8.4 vulnerability in Docker Sandboxes sbx cp allowing unauthorized host file read and write operations.
Discover CVE-2026-120091, a critical 8.7 CVSS vulnerability in Temporal Server affecting Kubernetes worker controller configurations.
Discover CVE-2026-63395, a critical CVSS 8.8 vulnerability in isomorphic-git prior to 1.38.6 allowing arbitrary file writes via symlinks.
Discover critical CVE-2026-63471 in fastapi-code-generator. Learn how unescaped OpenAPI paths enable code injection and how version 0.8.1 fixes it.
Discover a comparative analysis of AI agent harnesses CUGA, Hermes, and Deep Agents, exploring how architecture impacts enterprise task performance.
Critical CVE-2026-89293 vulnerability in Eclipse Mnestix Browser CVSS 8.8 allows unauthenticated actions. Learn mitigation steps and impact.
Discover CVE-2026-119922, a CVSS 8.8 privilege escalation vulnerability in Babelfish for PostgreSQL. Learn affected versions and mitigation steps.
Discover CVE-2026-89292, a critical CVSS 9.2 vulnerability in Eclipse Mnestix Browser that exposes API keys. Learn affected versions and mitigation steps.
Discover CVE-2026-112917, a critical CVSS 9.2 vulnerability in Docker Desktop for Windows and WSL2 allowing unprivileged container escapes.
Discover CVE-2026-44267, a critical 9.8 CVSS remote code execution vulnerability in Elo expression language prior to version 1.0.1.
Critical command injection vulnerability CVE-2026-28336 in SolarWinds Dameware with CVSS 9.9. Learn impacts and mitigation steps.
Discover details about CVE-2026-119977, a critical TOCTOU race condition vulnerability in WordPress Core currently under active exploitation.
Discover CVE-2026-97718, a critical CVSS 9.4 cross-site request forgery vulnerability in Secure Access server version 14.60 enabling admin account creation.
Discover CVE-2026-106803, a critical CVSS 9.8 stack-based buffer overflow in Kamailio v6.1.3 and v6.1.4 affecting the ims_registrar_pcscf module.
Discover details about CVE-2026-120065, a CVSS 7.1 vulnerability in PostgreSQL psqlODBC affecting updatable cursors and positioned queries.
Discover CVE-2026-115653, a CVSS 7.0 privilege escalation vulnerability in Eclipse ThreadX for Cortex-M architectures affecting versions 6.0.1 to 6.5.2.202603.
Discover CVE-2026-120429, a CVSS 7.1 authorization flaw in Camaleon CMS before 2.9.2 that exposes media and private files to low-privileged users.
Discover CVE-2026-120487, a high-severity CVSS 7.2 authorization flaw in LaraDashboard before 1.4.5. Learn how it affects upgrades and how to patch.
Discover details about CVE-2026-120342, a high-severity SQL injection vulnerability in mathurvishal CloudClassroom-PHP-Project with public exploits.
Discover details about CVE-2026-91898, a CVSS 8.1 vulnerability in Dell Alienware Command Center allowing arbitrary code execution and elevation of privilege.
Analyze CVE-2026-59044, an 8.4 CVSS use-after-free vulnerability causing local privilege escalation without user interaction.
Discover CVE-2026-88810, a CVSS 7.2 privilege escalation vulnerability in Rancher Manager RBAC affecting downstream clusters and specific SUSE versions.
Discover details about CVE-2026-120337, a CVSS 7.3 vulnerability in VStarcam O-KAM SuperIPCam affecting P2P session teardown.
Discover technical details about CVE-2026-120349, a high severity code injection flaw affecting dayrui XunRuiCMS up to version 4.7.4.
Discover CVE-2026-120314, a CVSS 7.3 missing authentication vulnerability in Network-AI affecting versions 5.14.0 before 5.15.5. Learn how to mitigate it.
Analizamos CVE-2026-20549, una vulnerabilidad de módem con CVSS 7.5 que permite escalada remota de privilegios mediante estaciones base falsas.
Analyze CVE-2026-59028, a critical Android vulnerability with CVSS 8.4 caused by a confused deputy flaw leading to local privilege escalation.
Discover CVE-2026-120313, a high-severity CVSS 7.5 path traversal vulnerability in Network-AI InputSanitizer. Learn how to mitigate it.
Discover details about CVE-2026-120459, a critical authentication bypass vulnerability in python-jose through 3.5.0 involving empty HMAC secrets.
Discover CVE-2026-20585, a CVSS 7.5 modem vulnerability causing out-of-bounds writes via rogue base stations. Learn mitigation steps and patch details.
Discover details about CVE-2026-119731, a CVSS 7.5 payment bypass vulnerability in Munshi webhooks allowing unauthorized subscription activations.
Discover CVE-2026-120596, a CVSS 7.5 denial-of-service vulnerability in Nut/OS caused by an infinite loop in the TCP options parser.
Discover CVE-2026-120426, a CVSS 7.5 authorization bypass vulnerability in OpenCSG CSGHub through v2.6.0-ce exposing private repository files.
Discover technical details about CVE-2026-106804, a stack-based buffer overflow in Kamailio v6.1.3 and v6.1.4 causing denial of service.
Discover details about CVE-2026-106808, a stack-based buffer overflow in OpenAirInterface Core Network v2.2.1 UDM component with a CVSS score of 7.5.
Discover critical CVE-2026-120064 in psqlODBC with CVSS 7.5. Learn how untrusted column indices cause out-of-bounds errors and how to patch it.
Discover CVE-2026-92886, a CVSS 7.8 Missing Authorization vulnerability in TÜBİTAK BİLGEM eta-register affecting versions 2.0.8 before 2.0.9.
Discover details about CVE-2026-88809, a CVSS 7.6 vulnerability in SUSE Rancher Manager meta proxy endpoint that bypasses allowlists.
Discover CVE-2026-81938, a high-severity CVSS 7.7 vulnerability in Grafana Mimir allowing local file reading through Alertmanager configurations.
Discover details about CVE-2026-77879, a CVSS 7.7 SQL injection vulnerability in Control Web Panel affecting versions prior to 1.16.
Discover technical details about CVE-2026-20559, a CVSS 7.8 use-after-free vulnerability in the Android GPU pdma driver leading to privilege escalation.
Discover CVE-2026-120436, a CVSS 7.8 integer and heap buffer overflow vulnerability in Netpbm affecting multiple versions.
Discover details about CVE-2026-120438, a high-severity heap buffer overflow in QuickJS-NG before 0.16.0 affecting 32-bit hosts. Learn mitigation steps.
Discover technical details about CVE-2026-99227, a CVSS 7.8 vulnerability in the Linux kernel io_uring/waitid subsystem, and learn how to mitigate it.
New Linux kernel patches resolve CVE-2026-99239, a CVSS 7.8 critical race condition vulnerability in the Bluetooth L2CAP subsystem.
Discover CVE-2026-119737, a CVSS 7.8 command injection vulnerability in the Amlogic Android SDK affecting Nexbox A95X TV boxes.
Discover CVE-2026-58836, a high-severity CVSS 7.8 vulnerability in Android's InstallPackageHelper.java allowing Enhanced Confirmation Mode bypass.
Critical vulnerability CVE-2026-119301 in AWS SDK for pandas affects SQL identifiers in Apache Iceberg. Upgrade to 3.17.1 to mitigate.
Discover CVE-2026-119733, a critical missing authorization vulnerability in Munshi by Petpooja that allows unauthorized company deletion.
Analyze CVE-2026-59000, a CVSS 8.4 vulnerability causing local privilege escalation and permission bypass via a confused deputy.
Discover CVE-2026-120444, a high-severity path traversal vulnerability in GoFound through 1.4.1 allowing arbitrary directory deletion.