StackFire Threat Intelligence · en vivo
Cybersecurity Alerts
Las vulnerabilidades que los atacantes están explotando hoy, las CVE críticas de la semana y el nivel de amenaza, con datos oficiales de CISA y NIST NVD. En español, sin registro.
Últimos 14 días
Explotadas (KEV) CVE críticas y altas (NVD)
Explotadas activamente
El catálogo KEV de CISA: vulnerabilidades con evidencia de explotación real. Son las primeras que hay que parchar.
-
Explotada
CVE-2026-123039Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability
Check Point · Multiple Products
Check Point Firewall, Multi-Domain Security Management Server, Scalable Platforms, Security Gateway, and Security Management Server contain an incorrect permissions assignment for critical resources vulnerability when the Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket without authe…
Agregada 13 nov 2026 Vence en 3 d -
Explotada
CVE-2026-114713UnrealIRCd Improper Neutralization of Delimiters Vulnerability
UnrealIRCd · UnrealIRCd
UnrealIRCd UnrealIRCd contains an improper neutralization of delimiters vulnerability that allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority.
Agregada 13 nov 2026 Vence en 3 d -
Explotada
CVE-2026-20320Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
Cisco · BroadWorks
Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system.
Agregada 10 nov 2026 Vence en 11 d -
Explotada
CVE-2026-125350Google Chromium Use-After-Free Vulnerability
Google · Chromium
Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Micros…
Agregada 10 nov 2026 Vence en 11 d -
Explotada
CVE-2026-124194Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
Microsoft · Office
Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network.
Agregada 10 nov 2026 Vence en 11 d -
Explotada
CVE-2026-116606Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
Barracuda Networks · Barracuda Email Security Gateway (ESG)
Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s…
Agregada 10 nov 2026 Vence hoy -
Explotada
CVE-2026-111793Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
Openwave Messaging Limited · Webtop Media Transcoder
Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
Agregada 10 nov 2026 Vence en 11 d -
Explotada
CVE-2026-111560Barracuda Networks Multiple Products OS Command Injection Vulnerability
Barracuda Networks · Multiple Products
Barracuda Networks Email Security Gateway (ESG), Load Balancer, Application Delivery Controller (ADC), Message Archiver (BMA), WAF Control Center (WCC), Web Application Firewall (WAF), and Web Security Gateway (WSG) contain an OS command injection vulnerability. This vulnerability could allow an authenticated administ…
Agregada 10 nov 2026 Vence hoy -
Explotada
CVE-2026-123218IBM Aspera Faspex Incorrect Authorization Vulnerability
IBM · Aspera Faspex
IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.
Agregada 9 nov 2026 Venció hace 1 d
Ver 6 más
-
Explotada
CVE-2026-123158OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability
OpenBSD · OpenSSH
OpenBSD OpenSSH on Linux contains an unexpected status code or return value vulnerability that could allow for authentication bypass.
Agregada 9 nov 2026 Venció hace 1 d -
Explotada
CVE-2026-116779SignalWire FreeSwitch Code Injection Vulnerability
SignalWire · FreeSwitch
SignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution.
Agregada 9 nov 2026 Venció hace 1 d -
Explotada
CVE-2026-102895GPUStack Improper Authentication Vulnerability
GPUStack · GPUStack
GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml.
Agregada 9 nov 2026 Venció hace 1 d -
Explotada
CVE-2026-19868SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
SonicWall · SonicOS SSLVPN
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
Agregada 6 nov 2026 Vence en 7 d -
Explotada
CVE-2024-27834Apple Multiple Products Improper Authentication Vulnerability
Apple · Multiple Products
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.
Agregada 4 nov 2026 Vence en 5 d -
Explotada
CVE-2026-119977WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
WordPress · WordPress Core
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades.
Agregada 3 nov 2026 Venció hace 7 d
Ninguna coincide con la búsqueda.
CVE críticas recientes
Publicadas por NIST NVD con puntuación CVSS crítica o alta (8.8 o más). Las marcadas como explotadas también están en KEV.
-
8.8
CVE-2026-123134Alta The Smoove abandoned cart trigger for WooCommerce WordPress plugin before 4.3.6 does not sanitise and escape abandoned-cart data submitted by visitors before outputting it in the admin dashboard, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators. -
8.8
CVE-2026-121998Alta The iChart WordPress plugin before 2.2.4 does not perform capability or ownership checks in several of its AJAX actions, relying only on a nonce that any logged-in user can obtain, allowing users with a role as low as Subscriber to read, modify and permanently delete arbitrary posts and to overwrite a site-wide option. -
8.8
CVE-2026-121862Alta The Knowledge Building WordPress plugin before 0.7.3 does not sanitise and escape comments submitted through its reply feature, and publishes them without moderation, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against any visitor of the affected posts, including administrators. -
9.8
CVE-2026-121497Crítica The AskAny WordPress plugin before 2.2.0 does not validate the extension or content of files attached to chat messages, trusting the browser-supplied file type instead, which allows unauthenticated users to upload PHP files and execute arbitrary code when visitor attachments are enabled. -
8.8
CVE-2026-118041Alta The Contest Gallery WordPress plugin before 34.0.3 does not sanitise the name of files uploaded through its e-commerce sale file-replacement feature, allowing authenticated users with Author-level access and above to write files with an arbitrary name and extension to a web-accessible directory and, by overwriting the… -
9.6
CVE-2026-115735Crítica The Somatic Framework WordPress plugin through 1.8.14 does not perform an authorization check or validate a user-supplied file path before deleting it, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can lead to a full site takeover. -
9.6
CVE-2026-115734Crítica The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does it restrict access to the relevant administration screens, allowing users with a role as low as Subscriber to delete arbitrary files on the server, which can lead to a full site compromise. -
9.1
CVE-2026-115733Crítica The Printaura-Woocommerce WordPress plugin through 4.0.2 does not properly restrict access to the WooCommerce REST API, causing every WooCommerce REST route to accept unauthenticated requests, which allows unauthenticated attackers to read and modify store data including customer orders and personal information, store…
Ver 10 más
-
9.8
CVE-2026-64682Crítica AstroBlocks is a block-first CMS for Astro projects. Prior to version 3.4.0, admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name. An attacker who knows the public fallback value (readable in the published package) can forge a valid session token with ro… -
9.8
CVE-2026-64678Crítica NOsql Object (NO2 a.k.a Nitrite) database is an open source nosql embedded document store. Prior to version 4.4.1, when Nitrite opens a database file, MVStoreUtils.openOrCreate() automatically checks for a legacy v1-format store and, on detecting one (or hitting a compatibility error while opening), triggers an automa… -
9.3
CVE-2026-64670Crítica Waline is a comment system with backend support. In versions 3.15.2 and prior, @waline/client renders the comment editor's live preview with marked and no sanitizer (utils/markdown.ts), and the preview is injected with v-html. When a comment is edited, the editor is seeded with the comment's raw, un-sanitized body (or… -
9.8
CVE-2026-126542Crítica WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user via Hybridauth social login display names. Attackers can set their X, Facebook, Yahoo or LinkedIn display name to a victim's username and withhold email, causing login.json.php or… -
9.9
CVE-2026-121908Crítica Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this… -
9.9
CVE-2026-121906Crítica Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issu… -
9.6
CVE-2026-121904Crítica Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially… -
9.4
CVE-2026-121902Crítica Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially compromising the confidentiality, integrity, and… -
9.9
CVE-2026-121898Crítica Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this… -
9.9
CVE-2026-121896Crítica Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this…
Ninguna coincide con la búsqueda.
Fabricantes más atacados
Vulnerabilidades explotadas por fabricante, últimos 90 días (KEV).
Debilidades más comunes
Tipos de falla (CWE) en las CVE de los últimos 30 días (NVD).
Avisos de CISA
- 19 oct 2026 #StopRansomware: SafePay Ransomware Advisory at a Glance Title #StopRansomware: SafePay Ransomware Original Publication October 20, 2026 Executive Summary This advisory details recent activity by the SafePay ransomware group. SafePay actors have been highly active since August 2024, targeting businesses and critical infrastructure across North America,… Leer en CISA
- 6 oct 2026 Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber threat actors, enabled by the Integrity Technology Group, are combining automated scanning… Leer en CISA
- 8 jul 2026 Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting Russian Government-Sponsored Activity Targets Poorly Configured and Vulnerable Devices Across Critical Sectors Executive summary Russian Federal Security Service (FSB) Center 16 cyber actors continue to exploit poorly configured and vulnerable networking devices worldwide, opportunistically compromising multiple criti… Leer en CISA
- 6 abr 2026 Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure Advisory at a Glance Title Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure Original Publication April 7, 2026 Executive Summary Iran-affiliated advanced persistent threat (APT) actors are conducting exploitation activity targeting internet-facing operational tec… Leer en CISA
- 5 dic 2025 Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure Summary Note: This joint Cybersecurity Advisory is being published as an addition to the Cybersecurity and Infrastructure Security Agency (CISA) May 6, 2025, joint fact sheet Primary Mitigations to Reduce Cyber Threats to Operational Technology and European Cybercrime Centre’s (EC3) Operation Eastwood, in which CISA,… Leer en CISA
- 22 sep 2025 CISA comparte las lecciones aprendidas de un compromiso de respuesta a incidentes Resumen del Aviso Resumen Ejecutivo CISA inició iniciativas de respuesta a incidentes en una agencia de la rama ejecutiva civil federal (FCEB) de EE. UU. tras detectar una posible actividad maliciosa mediante alertas de seguridad generadas por la herramienta de detección y respuesta de endpoints (EDR) de la agencia. C… Leer en CISA
Cómo calculamos el nivel de amenaza
El índice de StackFire resume los últimos 7 días en una escala de 0 a 100, con más peso en lo que ya se está explotando. Cada vulnerabilidad nueva del catálogo KEV suma 7 puntos, cada CVE crítica 2, cada CVE alta 0.5 y cada fecha límite de CISA en los próximos 14 días 3. El total se limita a 100.
- Bajo0–19
- Moderado20–44
- Elevado45–69
- Alto70–100
Es una referencia para priorizar, no una medición de riesgo para tu organización: tu exposición depende de qué productos usas y cómo están configurados.
API y feeds abiertos
Los mismos datos, para tus herramientas, tu SIEM o tu bot. Sin registro.
- GET
/api/cyber-alertsÍndice, métricas, tendencia y listas en JSON. - GET
/api/cyber-alerts/cve/CVE-AAAA-NNNNUna vulnerabilidad: CVSS, vector explicado, KEV y referencias. - RSS
/cyber-alerts/rss.xmlExplotadas y críticas, para tu lector o Teams/Slack.
¿Alguna de estas vulnerabilidades está en tu red?
Revisamos tu exposición, priorizamos los parches y vigilamos tu infraestructura 24/7.