{"source":"Network Alert (compilación de fuentes públicas)","source_url":"https://networkalert.dev/fuentes","license":"Compilación bajo CC BY 4.0; cada alerta conserva la licencia de su fuente (ver sources[].license).","generated_at":"2026-11-13T21:45:28.487Z","age_s":888,"notes":["Cada alerta enlaza a su fuente primaria en `url`; verifica ahí antes de actuar.","`first_seen` es el momento en que Network Alert vio la alerta por primera vez, no cuando ocurrió.","Una alerta con `stale: true` viene de una fuente que falló en la última lectura; se conserva el último dato conocido."],"total":115,"returned":100,"alerts":[{"id":"status:flyio:01M76HANB3XQC6WYKPA69WQN8Z","source":"status-flyio","category":"platform","severity":"critical","title":"Fly.io: LAX region outage","summary":"The LAX region is currently online and functioning correctly. However, the datacenter is experiencing reduced redundancy, so we are continuing to monitor for any possible issues.","url":"https://status.flyio.net/incidents/01M76HANB3XQC6WYKPA69WQN8Z","published":"2026-11-12T00:08:09.000Z","updated":"2026-11-12T03:19:30.000Z","status":"active","tags":["infraestructura"],"extra":{"platform":"flyio","phase":"monitoring","impact":"critical"},"first_seen":"2026-11-13T17:50:03.491Z","countries":[]},{"id":"ghsa:GHSA-x585-4vv8-2mh2","source":"github-advisories","category":"vulnerability","severity":"critical","title":"Rucio: Unauthenticated administrator impersonation through SSH challenge tokens","summary":"rucio (pip) >= 41.0.0rc1, < 41.1.1 → corregido en 41.1.1","url":"https://github.com/advisories/GHSA-x585-4vv8-2mh2","published":"2026-11-13T01:09:54.000Z","updated":"2026-11-13T01:09:55.000Z","status":"active","tags":["pip"],"extra":{"cve":"CVE-2026-100397","ghsa":"GHSA-x585-4vv8-2mh2","cvss":9.8,"packages":[{"ecosystem":"pip","name":"rucio","range":">= 41.0.0rc1, < 41.1.1","patched":"41.1.1"}]},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-f3w6-w445-fwh9","source":"github-advisories","category":"vulnerability","severity":"critical","title":"Active Storage: Possible arbitrary file write and read in image analysis","summary":"activestorage (rubygems) < 8.0.5.2 → corregido en 8.0.5.2","url":"https://github.com/advisories/GHSA-f3w6-w445-fwh9","published":"2026-11-12T23:46:51.000Z","updated":"2026-11-12T23:46:52.000Z","status":"active","tags":["rubygems"],"extra":{"cve":"CVE-2026-122006","ghsa":"GHSA-f3w6-w445-fwh9","cvss":9.8,"packages":[{"ecosystem":"rubygems","name":"activestorage","range":"< 8.0.5.2","patched":"8.0.5.2"}],"epss":{"score":0.00741,"percentile":0.55201}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-4g86-54fm-h9h8","source":"github-advisories","category":"vulnerability","severity":"critical","title":"Microsoft Security Advisory CVE-2026-118740 - Aspire Security Feature Bypass Vulnerability","summary":"Aspire.Dashboard.Sdk.linux-x64 (nuget) < 13.6.5 → corregido en 13.6.5 · Aspire.Dashboard.Sdk.linux-arm64 (nuget) < 13.6.5 → corregido en 13.6.5 · Aspire.Dashboard.Sdk.linux-musl-x64 (nuget) < 13.6.5 → corregido en 13.6.5 · Aspire.Dashboard.Sdk.osx-x64 (nuget) < 13.6.5 → corregido en 13.6.5","url":"https://github.com/advisories/GHSA-4g86-54fm-h9h8","published":"2026-11-12T17:17:48.000Z","updated":"2026-11-12T17:17:49.000Z","status":"active","tags":["nuget"],"extra":{"cve":"CVE-2026-118740","ghsa":"GHSA-4g86-54fm-h9h8","cvss":9.1,"packages":[{"ecosystem":"nuget","name":"Aspire.Dashboard.Sdk.linux-x64","range":"< 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Dashboard.Sdk.linux-arm64","range":"< 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Dashboard.Sdk.linux-musl-x64","range":"< 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Dashboard.Sdk.osx-x64","range":"< 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Dashboard.Sdk.osx-arm64","range":"< 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Dashboard.Sdk.win-x64","range":"< 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Dashboard.Sdk.win-arm64","range":"< 13.6.5","patched":"13.6.5"}],"epss":{"score":0.00923,"percentile":0.60923}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-xqc2-xf4c-x3h3","source":"github-advisories","category":"vulnerability","severity":"critical","title":"React: Unauthenticated Remote Code Execution in React Server Components","summary":"react-server-dom-parcel (npm) >= 19.3.0, < 19.3.1 → corregido en 19.3.1 · react-server-dom-turbopack (npm) >= 19.3.0, < 19.3.1 → corregido en 19.3.1 · react-server-dom-webpack (npm) >= 19.3.0, < 19.3.1 → corregido en 19.3.1","url":"https://github.com/advisories/GHSA-xqc2-xf4c-x3h3","published":"2026-11-10T22:44:12.000Z","updated":"2026-11-10T22:44:13.000Z","status":"active","tags":["npm"],"extra":{"cve":"CVE-2026-126187","ghsa":"GHSA-xqc2-xf4c-x3h3","cvss":null,"packages":[{"ecosystem":"npm","name":"react-server-dom-parcel","range":">= 19.3.0, < 19.3.1","patched":"19.3.1"},{"ecosystem":"npm","name":"react-server-dom-turbopack","range":">= 19.3.0, < 19.3.1","patched":"19.3.1"},{"ecosystem":"npm","name":"react-server-dom-webpack","range":">= 19.3.0, < 19.3.1","patched":"19.3.1"}],"epss":{"score":0.01763,"percentile":0.78392}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-pcrw-h46h-c93h","source":"github-advisories","category":"vulnerability","severity":"critical","title":"Mongoose: sanitizeFilter not applied on countDocuments","summary":"mongoose (npm) >= 9.0.0, < 9.9.2 → corregido en 9.9.2","url":"https://github.com/advisories/GHSA-pcrw-h46h-c93h","published":"2026-11-10T19:37:32.000Z","updated":"2026-11-10T19:37:33.000Z","status":"active","tags":["npm"],"extra":{"cve":"CVE-2026-125120","ghsa":"GHSA-pcrw-h46h-c93h","cvss":9.8,"packages":[{"ecosystem":"npm","name":"mongoose","range":">= 9.0.0, < 9.9.2","patched":"9.9.2"}],"epss":{"score":0.00566,"percentile":0.47527}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-8vv3-6qpc-gpw6","source":"github-advisories","category":"vulnerability","severity":"critical","title":"bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list","summary":"bitcoinjs-lib (npm) >= 7.0.0-rc.0, < 7.0.2 → corregido en 7.0.2","url":"https://github.com/advisories/GHSA-8vv3-6qpc-gpw6","published":"2026-11-10T15:57:25.000Z","updated":"2026-11-11T05:12:35.000Z","status":"active","tags":["npm"],"extra":{"cve":"CVE-2026-107846","ghsa":"GHSA-8vv3-6qpc-gpw6","cvss":null,"packages":[{"ecosystem":"npm","name":"bitcoinjs-lib","range":">= 7.0.0-rc.0, < 7.0.2","patched":"7.0.2"}],"epss":{"score":0.0018,"percentile":0.07611}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-62m9-f875-rqw6","source":"github-advisories","category":"vulnerability","severity":"critical","title":"GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover","summary":"gpustack (pip) >= 0.7.1, < 2.2.2 → corregido en 2.2.2","url":"https://github.com/advisories/GHSA-62m9-f875-rqw6","published":"2026-11-10T15:57:15.000Z","updated":"2026-11-10T15:57:19.000Z","status":"active","tags":["pip"],"extra":{"cve":"CVE-2026-102894","ghsa":"GHSA-62m9-f875-rqw6","cvss":9.1,"packages":[{"ecosystem":"pip","name":"gpustack","range":">= 0.7.1, < 2.2.2","patched":"2.2.2"}],"epss":{"score":0.00259,"percentile":0.17686}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-xggf-m53x-jc3f","source":"github-advisories","category":"vulnerability","severity":"critical","title":"node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions","summary":"node-opcua (npm) >= 2.42.0, < 2.180.0 → corregido en 2.180.0 · node-opcua-address-space (npm) >= 2.42.0, < 2.180.0 → corregido en 2.180.0 · node-opcua-server (npm) >= 2.42.0, < 2.180.0 → corregido en 2.180.0","url":"https://github.com/advisories/GHSA-xggf-m53x-jc3f","published":"2026-11-10T15:56:52.000Z","updated":"2026-11-10T15:57:14.000Z","status":"active","tags":["npm"],"extra":{"cve":"CVE-2026-95860","ghsa":"GHSA-xggf-m53x-jc3f","cvss":9.1,"packages":[{"ecosystem":"npm","name":"node-opcua","range":">= 2.42.0, < 2.180.0","patched":"2.180.0"},{"ecosystem":"npm","name":"node-opcua-address-space","range":">= 2.42.0, < 2.180.0","patched":"2.180.0"},{"ecosystem":"npm","name":"node-opcua-server","range":">= 2.42.0, < 2.180.0","patched":"2.180.0"}],"epss":{"score":0.00596,"percentile":0.49049}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-rjr3-43j3-4q8g","source":"github-advisories","category":"vulnerability","severity":"critical","title":"Kubeflow Pipelines API server lacks authorization for shared pipeline uploads","summary":"github.com/kubeflow/pipelines (go) < 0.0.0-20260909234119-62516d8c525f → corregido en 0.0.0-20260909234119-62516d8c525f","url":"https://github.com/advisories/GHSA-rjr3-43j3-4q8g","published":"2026-11-09T22:22:41.000Z","updated":"2026-11-09T22:22:42.000Z","status":"active","tags":["go"],"extra":{"cve":"CVE-2026-77596","ghsa":"GHSA-rjr3-43j3-4q8g","cvss":9.6,"packages":[{"ecosystem":"go","name":"github.com/kubeflow/pipelines","range":"< 0.0.0-20260909234119-62516d8c525f","patched":"0.0.0-20260909234119-62516d8c525f"}],"epss":{"score":0.0025,"percentile":0.16532}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-gj9m-f8ph-pmhr","source":"github-advisories","category":"vulnerability","severity":"critical","title":"GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin","summary":"gpustack (pip) < 2.2.0 → corregido en 2.2.0","url":"https://github.com/advisories/GHSA-gj9m-f8ph-pmhr","published":"2026-11-09T22:15:27.000Z","updated":"2026-11-09T22:15:29.000Z","status":"active","tags":["pip"],"extra":{"cve":"CVE-2026-102895","ghsa":"GHSA-gj9m-f8ph-pmhr","cvss":9.8,"packages":[{"ecosystem":"pip","name":"gpustack","range":"< 2.2.0","patched":"2.2.0"}],"epss":{"score":0.00517,"percentile":0.44535}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-rm8c-2cv8-jwf6","source":"github-advisories","category":"vulnerability","severity":"critical","title":"Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing","summary":"github.com/pocket-id/pocket-id/backend (go) < 0.0.0-20260727180059-43aaccd5bfac → corregido en 0.0.0-20260727180059-43aaccd5bfac","url":"https://github.com/advisories/GHSA-rm8c-2cv8-jwf6","published":"2026-11-09T22:12:21.000Z","updated":"2026-11-09T22:12:22.000Z","status":"active","tags":["go"],"extra":{"cve":"CVE-2026-115770","ghsa":"GHSA-rm8c-2cv8-jwf6","cvss":9.6,"packages":[{"ecosystem":"go","name":"github.com/pocket-id/pocket-id/backend","range":"< 0.0.0-20260727180059-43aaccd5bfac","patched":"0.0.0-20260727180059-43aaccd5bfac"}],"epss":{"score":0.00166,"percentile":0.05988}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-p2mm-64f6-gmpp","source":"github-advisories","category":"vulnerability","severity":"critical","title":"fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator","summary":"fastapi-code-generator (pip) < 0.8.1 → corregido en 0.8.1","url":"https://github.com/advisories/GHSA-p2mm-64f6-gmpp","published":"2026-11-09T19:48:08.000Z","updated":"2026-11-09T19:48:09.000Z","status":"active","tags":["pip"],"extra":{"cve":"CVE-2026-63471","ghsa":"GHSA-p2mm-64f6-gmpp","cvss":null,"packages":[{"ecosystem":"pip","name":"fastapi-code-generator","range":"< 0.8.1","patched":"0.8.1"}],"epss":{"score":0.00312,"percentile":0.24477}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-6xmv-cjr5-w3q8","source":"github-advisories","category":"vulnerability","severity":"critical","title":"fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict","summary":"fastapi-code-generator (pip) < 0.8.1 → corregido en 0.8.1","url":"https://github.com/advisories/GHSA-6xmv-cjr5-w3q8","published":"2026-11-09T19:46:27.000Z","updated":"2026-11-09T19:46:28.000Z","status":"active","tags":["pip"],"extra":{"cve":"CVE-2026-63469","ghsa":"GHSA-6xmv-cjr5-w3q8","cvss":null,"packages":[{"ecosystem":"pip","name":"fastapi-code-generator","range":"< 0.8.1","patched":"0.8.1"}],"epss":{"score":0.00312,"percentile":0.24477}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-h667-4jj2-cgv4","source":"github-advisories","category":"vulnerability","severity":"critical","title":"fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring","summary":"fastapi-code-generator (pip) < 0.8.1 → corregido en 0.8.1","url":"https://github.com/advisories/GHSA-h667-4jj2-cgv4","published":"2026-11-09T18:50:00.000Z","updated":"2026-11-09T18:50:01.000Z","status":"active","tags":["pip"],"extra":{"cve":"CVE-2026-63470","ghsa":"GHSA-h667-4jj2-cgv4","cvss":null,"packages":[{"ecosystem":"pip","name":"fastapi-code-generator","range":"< 0.8.1","patched":"0.8.1"}],"epss":{"score":0.00468,"percentile":0.41017}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-47w9-6r3f-938g","source":"github-advisories","category":"vulnerability","severity":"critical","title":"LXD has restricted project bypass leading to arbitrary command execution","summary":"github.com/canonical/lxd (go) < 0.0.0-20260630083100-c5184be310b1 → corregido en 0.0.0-20260630083100-c5184be310b1","url":"https://github.com/advisories/GHSA-47w9-6r3f-938g","published":"2026-11-06T19:51:26.000Z","updated":"2026-11-06T19:51:26.000Z","status":"active","tags":["go"],"extra":{"cve":null,"ghsa":"GHSA-47w9-6r3f-938g","cvss":9.9,"packages":[{"ecosystem":"go","name":"github.com/canonical/lxd","range":"< 0.0.0-20260630083100-c5184be310b1","patched":"0.0.0-20260630083100-c5184be310b1"}]},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-pjff-c2wc-f6jm","source":"github-advisories","category":"vulnerability","severity":"critical","title":"LXD has arbitrary file write on client due to trusted image hash","summary":"github.com/canonical/lxd (go) < 0.0.0-20260630083100-c5184be310b1 → corregido en 0.0.0-20260630083100-c5184be310b1","url":"https://github.com/advisories/GHSA-pjff-c2wc-f6jm","published":"2026-11-06T19:36:55.000Z","updated":"2026-11-06T19:36:57.000Z","status":"active","tags":["go"],"extra":{"cve":null,"ghsa":"GHSA-pjff-c2wc-f6jm","cvss":9.9,"packages":[{"ecosystem":"go","name":"github.com/canonical/lxd","range":"< 0.0.0-20260630083100-c5184be310b1","patched":"0.0.0-20260630083100-c5184be310b1"}]},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-fmc8-p6q7-75cc","source":"github-advisories","category":"vulnerability","severity":"critical","title":"LXD has argument injection in backup compression algorithm leading to AFW and ACE","summary":"github.com/canonical/lxd (go) < 0.0.0-20260630083100-c5184be310b1 → corregido en 0.0.0-20260630083100-c5184be310b1","url":"https://github.com/advisories/GHSA-fmc8-p6q7-75cc","published":"2026-11-06T19:36:37.000Z","updated":"2026-11-06T19:36:38.000Z","status":"active","tags":["go"],"extra":{"cve":null,"ghsa":"GHSA-fmc8-p6q7-75cc","cvss":9.9,"packages":[{"ecosystem":"go","name":"github.com/canonical/lxd","range":"< 0.0.0-20260630083100-c5184be310b1","patched":"0.0.0-20260630083100-c5184be310b1"}]},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-vghh-5rfx-xhq8","source":"github-advisories","category":"vulnerability","severity":"critical","title":"LXD has arbitrary file read+write on host via rootfs/ symlink in malicious image","summary":"github.com/canonical/lxd (go) < 0.0.0-20260630083100-c5184be310b1 → corregido en 0.0.0-20260630083100-c5184be310b1","url":"https://github.com/advisories/GHSA-vghh-5rfx-xhq8","published":"2026-11-06T19:36:07.000Z","updated":"2026-11-06T19:36:08.000Z","status":"active","tags":["go"],"extra":{"cve":null,"ghsa":"GHSA-vghh-5rfx-xhq8","cvss":9.9,"packages":[{"ecosystem":"go","name":"github.com/canonical/lxd","range":"< 0.0.0-20260630083100-c5184be310b1","patched":"0.0.0-20260630083100-c5184be310b1"}]},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-jpf8-86f3-wp38","source":"github-advisories","category":"vulnerability","severity":"critical","title":"LXD has arbitrary file read+write on host via templates/ symlink in malicious image","summary":"github.com/canonical/lxd (go) < 0.0.0-20260203144152-d1c8ba15d160 → corregido en 0.0.0-20260203144152-d1c8ba15d160","url":"https://github.com/advisories/GHSA-jpf8-86f3-wp38","published":"2026-11-06T18:53:57.000Z","updated":"2026-11-06T18:53:57.000Z","status":"active","tags":["go"],"extra":{"cve":null,"ghsa":"GHSA-jpf8-86f3-wp38","cvss":9.9,"packages":[{"ecosystem":"go","name":"github.com/canonical/lxd","range":"< 0.0.0-20260203144152-d1c8ba15d160","patched":"0.0.0-20260203144152-d1c8ba15d160"}]},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-9j25-mm2h-2f76","source":"github-advisories","category":"vulnerability","severity":"critical","title":"LXD has arbitrary file write on host via `exec-output` symlink in crafted image","summary":"github.com/canonical/lxd (go) < 0.0.0-20260626085134-124f90100640 → corregido en 0.0.0-20260626085134-124f90100640","url":"https://github.com/advisories/GHSA-9j25-mm2h-2f76","published":"2026-11-06T18:45:51.000Z","updated":"2026-11-06T18:45:52.000Z","status":"active","tags":["go"],"extra":{"cve":null,"ghsa":"GHSA-9j25-mm2h-2f76","cvss":9.9,"packages":[{"ecosystem":"go","name":"github.com/canonical/lxd","range":"< 0.0.0-20260626085134-124f90100640","patched":"0.0.0-20260626085134-124f90100640"}]},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-114713","source":"cisa-kev","category":"vulnerability","severity":"high","title":"UnrealIRCd UnrealIRCd: UnrealIRCd Improper Neutralization of Delimiters Vulnerability","summary":"UnrealIRCd UnrealIRCd contains an improper neutralization of delimiters vulnerability that allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-114713","published":"2026-11-13T00:00:00.000Z","status":"active","tags":["explotada","UnrealIRCd"],"extra":{"cve":"CVE-2026-114713","ransomware":false,"due":"2026-11-16","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-140"],"epss":{"score":0.00302,"percentile":0.23297}},"first_seen":"2026-11-13T21:18:05.680Z","countries":[]},{"id":"kev:CVE-2026-123039","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Check Point Multiple Products: Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability","summary":"Check Point Firewall, Multi-Domain Security Management Server, Scalable Platforms, Security Gateway, and Security Management Server contain an incorrect permissions assignment for critical resources vulnerability when the Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket without authe…","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-123039","published":"2026-11-13T00:00:00.000Z","status":"active","tags":["explotada","Check Point","Multiple Products"],"extra":{"cve":"CVE-2026-123039","ransomware":false,"due":"2026-11-16","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-732","CWE-862"],"epss":{"score":0.01274,"percentile":0.70349}},"first_seen":"2026-11-13T21:18:05.680Z","countries":[]},{"id":"kev:CVE-2026-124194","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Microsoft Office: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability","summary":"Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-124194","published":"2026-11-10T00:00:00.000Z","status":"active","tags":["explotada","Microsoft","Office"],"extra":{"cve":"CVE-2026-124194","ransomware":false,"due":"2026-11-24","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-356"],"epss":{"score":0.0162,"percentile":0.76454}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-111793","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Openwave Messaging Limited Webtop Media Transcoder: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability","summary":"Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-111793","published":"2026-11-10T00:00:00.000Z","status":"active","tags":["explotada","Openwave Messaging Limited","Webtop Media Transcoder"],"extra":{"cve":"CVE-2026-111793","ransomware":false,"due":"2026-11-24","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-669"],"epss":{"score":0.00638,"percentile":0.51127}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-20320","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Cisco BroadWorks: Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability","summary":"Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20320","published":"2026-11-10T00:00:00.000Z","status":"active","tags":["explotada","Cisco","BroadWorks"],"extra":{"cve":"CVE-2026-20320","ransomware":false,"due":"2026-11-24","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-611"],"epss":{"score":0.00976,"percentile":0.62634}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-111560","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Barracuda Networks Multiple Products: Barracuda Networks Multiple Products OS Command Injection Vulnerability","summary":"Barracuda Networks Email Security Gateway (ESG), Load Balancer, Application Delivery Controller (ADC), Message Archiver (BMA), WAF Control Center (WCC), Web Application Firewall (WAF), and Web Security Gateway (WSG) contain an OS command injection vulnerability. This vulnerability could allow an authenticated administ…","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-111560","published":"2026-11-10T00:00:00.000Z","status":"active","tags":["explotada","Barracuda Networks","Multiple Products"],"extra":{"cve":"CVE-2026-111560","ransomware":false,"due":"2026-11-13","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-78"],"epss":{"score":0.09082,"percentile":0.95373}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-116606","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Barracuda Networks Barracuda Email Security Gateway (ESG): Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability","summary":"Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s…","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-116606","published":"2026-11-10T00:00:00.000Z","status":"active","tags":["explotada","Barracuda Networks","Barracuda Email Security Gateway (ESG)"],"extra":{"cve":"CVE-2026-116606","ransomware":false,"due":"2026-11-13","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-288"],"epss":{"score":0.10947,"percentile":0.95953}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-125350","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Google Chromium: Google Chromium Use-After-Free Vulnerability","summary":"Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Micros…","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-125350","published":"2026-11-10T00:00:00.000Z","status":"active","tags":["explotada","Google","Chromium"],"extra":{"cve":"CVE-2026-125350","ransomware":false,"due":"2026-11-24","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-416"],"epss":{"score":0.00962,"percentile":0.62163}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-102895","source":"cisa-kev","category":"vulnerability","severity":"high","title":"GPUStack GPUStack: GPUStack Improper Authentication Vulnerability","summary":"GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102895","published":"2026-11-09T00:00:00.000Z","status":"active","tags":["explotada","GPUStack"],"extra":{"cve":"CVE-2026-102895","ransomware":false,"due":"2026-11-12","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-287","CWE-290","CWE-346"],"epss":{"score":0.00517,"percentile":0.44535}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-123158","source":"cisa-kev","category":"vulnerability","severity":"high","title":"OpenBSD OpenSSH: OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability","summary":"OpenBSD OpenSSH on Linux contains an unexpected status code or return value vulnerability that could allow for authentication bypass.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-123158","published":"2026-11-09T00:00:00.000Z","status":"active","tags":["explotada","OpenBSD","OpenSSH"],"extra":{"cve":"CVE-2026-123158","ransomware":false,"due":"2026-11-12","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-394"],"epss":{"score":0.189,"percentile":0.9734}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-116779","source":"cisa-kev","category":"vulnerability","severity":"high","title":"SignalWire FreeSwitch: SignalWire FreeSwitch Code Injection Vulnerability","summary":"SignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-116779","published":"2026-11-09T00:00:00.000Z","status":"active","tags":["explotada","SignalWire","FreeSwitch"],"extra":{"cve":"CVE-2026-116779","ransomware":false,"due":"2026-11-12","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-77","CWE-78","CWE-749"],"epss":{"score":0.02473,"percentile":0.84783}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-123218","source":"cisa-kev","category":"vulnerability","severity":"high","title":"IBM Aspera Faspex: IBM Aspera Faspex Incorrect Authorization Vulnerability","summary":"IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-123218","published":"2026-11-09T00:00:00.000Z","status":"active","tags":["explotada","IBM","Aspera Faspex"],"extra":{"cve":"CVE-2026-123218","ransomware":false,"due":"2026-11-12","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-863"],"epss":{"score":0.00535,"percentile":0.45678}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-19868","source":"cisa-kev","category":"vulnerability","severity":"high","title":"SonicWall SonicOS SSLVPN: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability","summary":"SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-19868","published":"2026-11-06T00:00:00.000Z","status":"active","tags":["explotada","SonicWall","SonicOS SSLVPN"],"extra":{"cve":"CVE-2026-19868","ransomware":false,"due":"2026-11-20","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-308"],"epss":{"score":0.00532,"percentile":0.45511}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2024-27834","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Apple Multiple Products: Apple Multiple Products Improper Authentication Vulnerability","summary":"Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27834","published":"2026-11-04T00:00:00.000Z","status":"active","tags":["explotada","Apple","Multiple Products"],"extra":{"cve":"CVE-2024-27834","ransomware":false,"due":"2026-11-18","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-287"],"epss":{"score":0.01502,"percentile":0.74706}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-119977","source":"cisa-kev","category":"vulnerability","severity":"high","title":"WordPress WordPress Core: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability","summary":"WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-119977","published":"2026-11-03T00:00:00.000Z","status":"active","tags":["explotada","WordPress","WordPress Core"],"extra":{"cve":"CVE-2026-119977","ransomware":false,"due":"2026-11-06","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-367"],"epss":{"score":0.01199,"percentile":0.68645}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-118527","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability","summary":"Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-118527","published":"2026-10-30T00:00:00.000Z","status":"active","tags":["explotada","Ivanti","Connect Secure"],"extra":{"cve":"CVE-2026-118527","ransomware":false,"due":"2026-11-13","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-340"],"epss":{"score":0.00822,"percentile":0.57855}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-111357","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability","summary":"Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-111357","published":"2026-10-30T00:00:00.000Z","status":"active","tags":["explotada","Ivanti","Connect Secure"],"extra":{"cve":"CVE-2026-111357","ransomware":false,"due":"2026-11-02","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-306","CWE-862","CWE-345"],"epss":{"score":0.00533,"percentile":0.45557}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-97229","source":"cisa-kev","category":"vulnerability","severity":"high","title":"GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability","summary":"GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-97229","published":"2026-10-29T00:00:00.000Z","status":"active","tags":["explotada","GitLab","Community Edition and Enterprise Edition"],"extra":{"cve":"CVE-2026-97229","ransomware":false,"due":"2026-11-01","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-190"],"epss":{"score":0.69289,"percentile":0.99369}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-76418","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability","summary":"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76418","published":"2026-10-29T00:00:00.000Z","status":"active","tags":["explotada","Cisco","Secure Firewall ASA Software and Cisco Secure FTD Software"],"extra":{"cve":"CVE-2026-76418","ransomware":false,"due":"2026-11-01","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-690"],"epss":{"score":0.00821,"percentile":0.57831}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-41709","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging Vulnerability","summary":"Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41709","published":"2026-10-28T00:00:00.000Z","status":"active","tags":["explotada","Broadcom","VMware ESX"],"extra":{"cve":"CVE-2026-41709","ransomware":false,"due":"2026-11-11","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-778"],"epss":{"score":0.00689,"percentile":0.53293}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-46300","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Linux Kernel: Linux Kernel Missing Initialization of a Variable Vulnerability","summary":"Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can…","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-46300","published":"2026-10-28T00:00:00.000Z","status":"active","tags":["explotada","Linux","Kernel"],"extra":{"cve":"CVE-2026-46300","ransomware":false,"due":"2026-10-31","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-456"],"epss":{"score":0.1613,"percentile":0.96977}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-48356","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Adobe Commerce and Magento: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability","summary":"Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48356","published":"2026-10-27T00:00:00.000Z","status":"active","tags":["explotada","Adobe","Commerce and Magento"],"extra":{"cve":"CVE-2026-48356","ransomware":false,"due":"2026-11-10","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-434"],"epss":{"score":0.47472,"percentile":0.98862}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-111497","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Google Brotli: Google Brotli Unchecked Return Value Vulnerability","summary":"Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-111497","published":"2026-10-27T00:00:00.000Z","status":"active","tags":["explotada","Google","Brotli"],"extra":{"cve":"CVE-2026-111497","ransomware":false,"due":"2026-11-10","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-252","CWE-787"],"epss":{"score":0.82641,"percentile":0.99672}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-109618","source":"cisa-kev","category":"vulnerability","severity":"high","title":"PHP Group PHP: PHP Memory Corruption Vulnerability","summary":"PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-109618","published":"2026-10-26T00:00:00.000Z","status":"active","tags":["explotada","PHP Group","PHP"],"extra":{"cve":"CVE-2026-109618","ransomware":false,"due":"2026-10-29","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-416","CWE-755","CWE-824","CWE-1325","CWE-1419"],"epss":{"score":0.99999,"percentile":0.99999}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-109619","source":"cisa-kev","category":"vulnerability","severity":"high","title":"PHP Group PHP: PHP Stale Internal Request-State Vulnerability","summary":"PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-109619","published":"2026-10-26T00:00:00.000Z","status":"active","tags":["explotada","PHP Group","PHP"],"extra":{"cve":"CVE-2026-109619","ransomware":false,"due":"2026-10-29","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-416","CWE-755","CWE-824","CWE-1325","CWE-1419"],"epss":{"score":0.99999,"percentile":0.99999}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-114625","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator SQL Injection Vulnerability","summary":"Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestr…","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-114625","published":"2026-10-23T00:00:00.000Z","status":"active","tags":["explotada","Arista","VeloCloud Orchestrator"],"extra":{"cve":"CVE-2026-114625","ransomware":false,"due":"2026-10-26","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-89"],"epss":{"score":0.01025,"percentile":0.64074}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-110447","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Collabora Collabora Online – Built-in CODE Server: Collabora Online – Built-in CODE Server OS Command Injection Vulnerability","summary":"Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-110447","published":"2026-10-23T00:00:00.000Z","status":"active","tags":["explotada","Collabora","Collabora Online – Built-in CODE Server"],"extra":{"cve":"CVE-2026-110447","ransomware":false,"due":"2026-10-26","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-78"],"epss":{"score":0.73307,"percentile":0.99469}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-106931","source":"cisa-kev","category":"vulnerability","severity":"high","title":"EG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability","summary":"EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-106931","published":"2026-10-20T00:00:00.000Z","status":"active","tags":["explotada","EG Secure Solutions","SiteGuard Server Edition"],"extra":{"cve":"CVE-2026-106931","ransomware":false,"due":"2026-10-23","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-78"],"epss":{"score":0.02528,"percentile":0.85145}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-96656","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Plex Media Server: Plex Media Server External Control of File Name or Path Vulnerability","summary":"Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96656","published":"2026-10-20T00:00:00.000Z","status":"active","tags":["explotada","Plex","Media Server"],"extra":{"cve":"CVE-2026-96656","ransomware":false,"due":"2026-10-23","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-73"],"epss":{"score":0.01785,"percentile":0.78651}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-96655","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability","summary":"Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96656.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96655","published":"2026-10-20T00:00:00.000Z","status":"active","tags":["explotada","Plex","Media Server"],"extra":{"cve":"CVE-2026-96655","ransomware":false,"due":"2026-11-03","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-918"],"epss":{"score":0.10724,"percentile":0.95889}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-96654","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Plex Media Server: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability","summary":"Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96655, and CVE-2026-96656.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96654","published":"2026-10-20T00:00:00.000Z","status":"active","tags":["explotada","Plex","Media Server"],"extra":{"cve":"CVE-2026-96654","ransomware":false,"due":"2026-10-23","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-84"],"epss":{"score":0.01949,"percentile":0.80542}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-96652","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability","summary":"Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. This vulnerability can be chained with CVE-2026-96654, CVE-2…","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96652","published":"2026-10-20T00:00:00.000Z","status":"active","tags":["explotada","Plex","Media Server"],"extra":{"cve":"CVE-2026-96652","ransomware":false,"due":"2026-11-03","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-918"],"epss":{"score":0.11886,"percentile":0.96166}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-110936","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Siemens Software Center: Siemens Software Center Uncontrolled Search Path Element Vulnerability","summary":"Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-110936","published":"2026-10-20T00:00:00.000Z","status":"active","tags":["explotada","Siemens","Software Center"],"extra":{"cve":"CVE-2026-110936","ransomware":false,"due":"2026-11-03","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-427"],"epss":{"score":0.00967,"percentile":0.62265}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-102764","source":"cisa-kev","category":"vulnerability","severity":"high","title":"BeyondTrust Remote Support: BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability","summary":"BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102764","published":"2026-10-16T00:00:00.000Z","status":"active","tags":["explotada","BeyondTrust","Remote Support"],"extra":{"cve":"CVE-2026-102764","ransomware":false,"due":"2026-10-19","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-290"],"epss":{"score":0.79485,"percentile":0.9961}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2025-61624","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Fortinet Multiple Products: Fortinet Multiple Products Path Traversal Vulnerability","summary":"FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-61624","published":"2026-10-16T00:00:00.000Z","status":"active","tags":["explotada","Fortinet","Multiple Products"],"extra":{"cve":"CVE-2025-61624","ransomware":false,"due":"2026-10-19","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-22"],"epss":{"score":0.01395,"percentile":0.72819}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"kev:CVE-2026-21589","source":"cisa-kev","category":"vulnerability","severity":"high","title":"Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","summary":"Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attac…","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21589","published":"2026-10-15T00:00:00.000Z","status":"active","tags":["explotada","Atlassian","Multiple Products"],"extra":{"cve":"CVE-2026-21589","ransomware":false,"due":"2026-10-18","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…","cwes":["CWE-552"],"epss":{"score":0.99664,"percentile":0.9995}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:godaddy:lksz0v51w47r","source":"status-godaddy","category":"platform","severity":"high","title":"GoDaddy: Microsoft Office 365 Email Outage","summary":"Microsoft made additional progress toward service recovery, with recovery actions completed across portions of the affected infrastructure in different regions. Traffic is being gradually restored, and they’re seeing improvements in key customer scenarios, including mailbox access and delayed email processing. However…","url":"https://stspg.io/3f8qf2w66mdt","published":"2026-11-12T18:53:39.000Z","updated":"2026-11-13T13:12:30.463Z","status":"active","tags":["dominios","Professional Email with Microsoft 365"],"extra":{"platform":"godaddy","phase":"identified","impact":"major"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:claude:sqn3fg1l96dl","source":"status-claude","category":"platform","severity":"high","title":"Claude: Elevated errors affecting the Microsoft 365 connector","summary":"We're seeing signs of recovery for the Microsoft 365 connector. Claude for Outlook is also recovering. Some SharePoint search requests are still returning errors. Microsoft's incident remains open, so errors may return. We're continuing to monitor and will update this post as soon as we have more info.","url":"https://stspg.io/m0rbx38nmy1c","published":"2026-11-12T17:52:44.926Z","updated":"2026-11-13T15:40:53.645Z","status":"active","tags":["ia","claude.ai","Claude Cowork"],"extra":{"platform":"claude","phase":"monitoring","impact":"major"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-8fx7-8jr8-84rv","source":"github-advisories","category":"vulnerability","severity":"high","title":"NLTK: Unbounded CPU consumption in SteppingRecursiveDescentParser.parse() with ambiguous or self-embedding grammars","summary":"nltk (pip) <= 3.10.3 → corregido en 3.10.4","url":"https://github.com/advisories/GHSA-8fx7-8jr8-84rv","published":"2026-11-13T21:02:19.000Z","updated":"2026-11-13T21:02:20.000Z","status":"active","tags":["pip"],"extra":{"cve":"CVE-2026-126303","ghsa":"GHSA-8fx7-8jr8-84rv","cvss":7.5,"packages":[{"ecosystem":"pip","name":"nltk","range":"<= 3.10.3","patched":"3.10.4"}],"epss":{"score":0.00488,"percentile":0.42562}},"first_seen":"2026-11-13T21:18:05.680Z","countries":[]},{"id":"ghsa:GHSA-qg35-44qx-7vrr","source":"github-advisories","category":"vulnerability","severity":"high","title":"NLTK: Symlink escape in YCOECorpusReader lets a psd/pos directory symlink read files outside the corpus root within the data sandbox","summary":"nltk (pip) >= 3.10.0, <= 3.10.3 → corregido en 3.10.4","url":"https://github.com/advisories/GHSA-qg35-44qx-7vrr","published":"2026-11-13T20:55:16.000Z","updated":"2026-11-13T20:55:19.000Z","status":"active","tags":["pip"],"extra":{"cve":"CVE-2026-126304","ghsa":"GHSA-qg35-44qx-7vrr","cvss":7.5,"packages":[{"ecosystem":"pip","name":"nltk","range":">= 3.10.0, <= 3.10.3","patched":"3.10.4"}],"epss":{"score":0.00522,"percentile":0.44888}},"first_seen":"2026-11-13T21:18:05.680Z","countries":[]},{"id":"ghsa:GHSA-vvf4-9x63-8xvv","source":"github-advisories","category":"vulnerability","severity":"high","title":"dnspython has excessive memory and CPU use","summary":"dnspython (pip) < 2.9.2 → corregido en 2.9.2","url":"https://github.com/advisories/GHSA-vvf4-9x63-8xvv","published":"2026-11-13T20:19:13.000Z","updated":"2026-11-13T20:19:16.000Z","status":"active","tags":["pip"],"extra":{"cve":"CVE-2026-128089","ghsa":"GHSA-vvf4-9x63-8xvv","cvss":7.5,"packages":[{"ecosystem":"pip","name":"dnspython","range":"< 2.9.2","patched":"2.9.2"}]},"first_seen":"2026-11-13T21:18:05.680Z","countries":[]},{"id":"ghsa:GHSA-6vhm-j9h7-f9gh","source":"github-advisories","category":"vulnerability","severity":"high","title":"AutoMapper: Uncontrolled Recursion with Constructor Parameters","summary":"AutoMapper (nuget) < 15.1.4 → corregido en 15.1.4","url":"https://github.com/advisories/GHSA-6vhm-j9h7-f9gh","published":"2026-11-13T19:21:02.000Z","updated":"2026-11-13T19:21:03.000Z","status":"active","tags":["nuget"],"extra":{"cve":"CVE-2026-128082","ghsa":"GHSA-6vhm-j9h7-f9gh","cvss":7.5,"packages":[{"ecosystem":"nuget","name":"AutoMapper","range":"< 15.1.4","patched":"15.1.4"}]},"first_seen":"2026-11-13T21:18:05.680Z","countries":[]},{"id":"ghsa:GHSA-gpwp-5797-mjff","source":"github-advisories","category":"vulnerability","severity":"high","title":"AutoMapper: Denial of Service via uncontrolled recursion that bypasses MaxDepth","summary":"AutoMapper (nuget) < 15.1.4 → corregido en 15.1.4","url":"https://github.com/advisories/GHSA-gpwp-5797-mjff","published":"2026-11-13T18:47:17.000Z","updated":"2026-11-13T18:47:19.000Z","status":"active","tags":["nuget"],"extra":{"cve":"CVE-2026-128081","ghsa":"GHSA-gpwp-5797-mjff","cvss":7.5,"packages":[{"ecosystem":"nuget","name":"AutoMapper","range":"< 15.1.4","patched":"15.1.4"}]},"first_seen":"2026-11-13T21:18:05.680Z","countries":[]},{"id":"ghsa:GHSA-6655-6qjp-jx7x","source":"github-advisories","category":"vulnerability","severity":"high","title":"Soup Sieve: Exponential ReDoS in selector compilation via \\9-run in CSS_ESCAPES/IDENTIFIER","summary":"soupsieve (pip) <= 2.10 → corregido en 3.0.2","url":"https://github.com/advisories/GHSA-6655-6qjp-jx7x","published":"2026-11-13T16:39:43.000Z","updated":"2026-11-13T16:39:45.000Z","status":"active","tags":["pip"],"extra":{"cve":"CVE-2026-126191","ghsa":"GHSA-6655-6qjp-jx7x","cvss":7.5,"packages":[{"ecosystem":"pip","name":"soupsieve","range":"<= 2.10","patched":"3.0.2"}],"epss":{"score":0.00434,"percentile":0.38224}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-mmhr-3c5m-f64f","source":"github-advisories","category":"vulnerability","severity":"high","title":"Soup Sieve: Polynomial-time denial of service in the descendant combinator","summary":"soupsieve (pip) < 4.0.0 → corregido en 4.0.0","url":"https://github.com/advisories/GHSA-mmhr-3c5m-f64f","published":"2026-11-13T00:49:46.000Z","updated":"2026-11-13T00:49:47.000Z","status":"active","tags":["pip"],"extra":{"cve":"CVE-2026-126190","ghsa":"GHSA-mmhr-3c5m-f64f","cvss":7.5,"packages":[{"ecosystem":"pip","name":"soupsieve","range":"< 4.0.0","patched":"4.0.0"}],"epss":{"score":0.00538,"percentile":0.45849}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-wm3x-v3qw-4jh3","source":"github-advisories","category":"vulnerability","severity":"high","title":"Action Pack: Possible Strong Parameters Bypass in Parameters#each_key","summary":"actionpack (rubygems) < 8.0.5.2 → corregido en 8.0.5.2","url":"https://github.com/advisories/GHSA-wm3x-v3qw-4jh3","published":"2026-11-12T23:37:09.000Z","updated":"2026-11-12T23:37:10.000Z","status":"active","tags":["rubygems"],"extra":{"cve":"CVE-2026-126081","ghsa":"GHSA-wm3x-v3qw-4jh3","cvss":7.5,"packages":[{"ecosystem":"rubygems","name":"actionpack","range":"< 8.0.5.2","patched":"8.0.5.2"}],"epss":{"score":0.00625,"percentile":0.50548}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-xcvg-w56q-r89m","source":"github-advisories","category":"vulnerability","severity":"high","title":"Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size","summary":"Pillow (pip) <= 12.3.0 → corregido en 13.0.0","url":"https://github.com/advisories/GHSA-xcvg-w56q-r89m","published":"2026-11-12T23:34:43.000Z","updated":"2026-11-12T23:34:44.000Z","status":"active","tags":["pip"],"extra":{"cve":"CVE-2026-128067","ghsa":"GHSA-xcvg-w56q-r89m","cvss":null,"packages":[{"ecosystem":"pip","name":"Pillow","range":"<= 12.3.0","patched":"13.0.0"}],"epss":{"score":0.00451,"percentile":0.39709}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-73v3-wf97-vpgj","source":"github-advisories","category":"vulnerability","severity":"high","title":"msgpack-ruby JRuby decoder makes uncapped header-count allocations; a 5-byte message forces multi-GiB OOM","summary":"msgpack (rubygems) <= 1.8.6 → corregido en 1.8.7","url":"https://github.com/advisories/GHSA-73v3-wf97-vpgj","published":"2026-11-12T22:54:59.000Z","updated":"2026-11-12T22:55:00.000Z","status":"active","tags":["rubygems"],"extra":{"cve":"CVE-2026-126366","ghsa":"GHSA-73v3-wf97-vpgj","cvss":7.5,"packages":[{"ecosystem":"rubygems","name":"msgpack","range":"<= 1.8.6","patched":"1.8.7"}],"epss":{"score":0.00527,"percentile":0.45177}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-vq9p-w6wv-cr25","source":"github-advisories","category":"vulnerability","severity":"high","title":"pgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopback connections","summary":"github.com/pgEdge/control-plane (go) <= 0.10.1 → corregido en 0.11.0","url":"https://github.com/advisories/GHSA-vq9p-w6wv-cr25","published":"2026-11-12T20:46:03.000Z","updated":"2026-11-12T20:46:05.000Z","status":"active","tags":["go"],"extra":{"cve":"CVE-2026-125323","ghsa":"GHSA-vq9p-w6wv-cr25","cvss":7.8,"packages":[{"ecosystem":"go","name":"github.com/pgEdge/control-plane","range":"<= 0.10.1","patched":"0.11.0"}],"epss":{"score":0.00121,"percentile":0.01962}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-5qg5-rgp6-j5m5","source":"github-advisories","category":"vulnerability","severity":"high","title":"pgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated requests","summary":"github.com/pgEdge/pgedge-rag-server (go) < 1.0.1-0.20260729020411-a09d4872356b → corregido en 1.0.1-0.20260729020411-a09d4872356b","url":"https://github.com/advisories/GHSA-5qg5-rgp6-j5m5","published":"2026-11-12T20:37:38.000Z","updated":"2026-11-12T20:37:39.000Z","status":"active","tags":["go"],"extra":{"cve":"CVE-2026-125327","ghsa":"GHSA-5qg5-rgp6-j5m5","cvss":7.5,"packages":[{"ecosystem":"go","name":"github.com/pgEdge/pgedge-rag-server","range":"< 1.0.1-0.20260729020411-a09d4872356b","patched":"1.0.1-0.20260729020411-a09d4872356b"}],"epss":{"score":0.00446,"percentile":0.39323}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-x8x8-p968-x646","source":"github-advisories","category":"vulnerability","severity":"high","title":"Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability","summary":"Microsoft.NETCore.App.Runtime.win-x86 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0 · Microsoft.NETCore.App.Runtime.win-x64 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0 · Microsoft.NETCore.App.Runtime.win-arm64 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0","url":"https://github.com/advisories/GHSA-x8x8-p968-x646","published":"2026-11-11T00:47:20.000Z","updated":"2026-11-11T00:47:22.000Z","status":"active","tags":["nuget"],"extra":{"cve":"CVE-2026-118745","ghsa":"GHSA-x8x8-p968-x646","cvss":7.7,"packages":[{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-x86","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-x64","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-arm64","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"}],"epss":{"score":0.00949,"percentile":0.61744}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-xf35-v9jh-g65w","source":"github-advisories","category":"vulnerability","severity":"high","title":"Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability","summary":"Microsoft.NETCore.App.Runtime.win-x86 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0 · Microsoft.NETCore.App.Runtime.win-x64 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0 · Microsoft.NETCore.App.Runtime.win-arm64 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0","url":"https://github.com/advisories/GHSA-xf35-v9jh-g65w","published":"2026-11-11T00:46:12.000Z","updated":"2026-11-11T00:46:14.000Z","status":"active","tags":["nuget"],"extra":{"cve":"CVE-2026-114152","ghsa":"GHSA-xf35-v9jh-g65w","cvss":7.7,"packages":[{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-x86","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-x64","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-arm64","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"}],"epss":{"score":0.00949,"percentile":0.61752}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-fpxj-5c99-g7vj","source":"github-advisories","category":"vulnerability","severity":"high","title":"Microsoft Security Advisory CVE-2026-114151 - Visual Studio Remote Code Execution Vulnerability","summary":"Microsoft.NETCore.App.Runtime.win-x86 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0 · Microsoft.NETCore.App.Runtime.win-x64 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0 · Microsoft.NETCore.App.Runtime.win-arm64 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0","url":"https://github.com/advisories/GHSA-fpxj-5c99-g7vj","published":"2026-11-11T00:35:02.000Z","updated":"2026-11-11T00:35:05.000Z","status":"active","tags":["nuget"],"extra":{"cve":"CVE-2026-114151","ghsa":"GHSA-fpxj-5c99-g7vj","cvss":7.7,"packages":[{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-x86","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-x64","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-arm64","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"}],"epss":{"score":0.01492,"percentile":0.7454}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-r8h3-p8p6-ggp7","source":"github-advisories","category":"vulnerability","severity":"high","title":"Microsoft Security Advisory CVE-2026-114158 - Visual Studio Remote Code Execution Vulnerability","summary":"Microsoft.NETCore.App.Runtime.win-x86 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0 · Microsoft.NETCore.App.Runtime.win-x64 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0 · Microsoft.NETCore.App.Runtime.win-arm64 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0","url":"https://github.com/advisories/GHSA-r8h3-p8p6-ggp7","published":"2026-11-11T00:34:13.000Z","updated":"2026-11-11T00:34:15.000Z","status":"active","tags":["nuget"],"extra":{"cve":"CVE-2026-114158","ghsa":"GHSA-r8h3-p8p6-ggp7","cvss":7.7,"packages":[{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-x86","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-x64","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-arm64","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"}],"epss":{"score":0.0087,"percentile":0.59332}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-3cgx-w6gm-fqrx","source":"github-advisories","category":"vulnerability","severity":"high","title":"Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability","summary":"Microsoft.NETCore.App.Runtime.win-x86 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0 · Microsoft.NETCore.App.Runtime.win-x64 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0 · Microsoft.NETCore.App.Runtime.win-arm64 (nuget) >= 11.0.0-preview.1, < 11.0.0 → corregido en 11.0.0","url":"https://github.com/advisories/GHSA-3cgx-w6gm-fqrx","published":"2026-11-11T00:32:59.000Z","updated":"2026-11-11T00:33:03.000Z","status":"active","tags":["nuget"],"extra":{"cve":"CVE-2026-114159","ghsa":"GHSA-3cgx-w6gm-fqrx","cvss":7.7,"packages":[{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-x86","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-x64","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.NETCore.App.Runtime.win-arm64","range":">= 11.0.0-preview.1, < 11.0.0","patched":"11.0.0"}],"epss":{"score":0.0087,"percentile":0.59332}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-q6jf-24jf-m3cg","source":"github-advisories","category":"vulnerability","severity":"high","title":"Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability","summary":"Aspire.Cli (nuget) >= 13.2.0, < 13.6.5 → corregido en 13.6.5 · Aspire.Cli.linux-x64 (nuget) >= 13.3.0, < 13.6.5 → corregido en 13.6.5 · Aspire.Cli.linux-arm64 (nuget) >= 13.3.0, < 13.6.5 → corregido en 13.6.5 · Aspire.Cli.linux-musl-x64 (nuget) >= 13.3.0, < 13.6.5 → corregido en 13.6.5","url":"https://github.com/advisories/GHSA-q6jf-24jf-m3cg","published":"2026-11-11T00:31:23.000Z","updated":"2026-11-11T00:31:25.000Z","status":"active","tags":["nuget","npm"],"extra":{"cve":"CVE-2026-120792","ghsa":"GHSA-q6jf-24jf-m3cg","cvss":7.3,"packages":[{"ecosystem":"nuget","name":"Aspire.Cli","range":">= 13.2.0, < 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Cli.linux-x64","range":">= 13.3.0, < 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Cli.linux-arm64","range":">= 13.3.0, < 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Cli.linux-musl-x64","range":">= 13.3.0, < 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Cli.osx-x64","range":">= 13.3.0, < 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Cli.osx-arm64","range":">= 13.3.0, < 13.6.5","patched":"13.6.5"},{"ecosystem":"npm","name":"@microsoft/aspire-cli","range":">= 13.4.2, < 13.6.5","patched":"13.6.5"},{"ecosystem":"npm","name":"@microsoft/aspire-cli-linux-x64","range":">= 13.4.2, < 13.6.5","patched":"13.6.5"}],"epss":{"score":0.00419,"percentile":0.36774}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-m63f-xhvm-6mv5","source":"github-advisories","category":"vulnerability","severity":"high","title":"Microsoft Security Advisory CVE-2026-120778 - Aspire Elevation of Privilege Vulnerability","summary":"Aspire.Cli (nuget) >= 13.2.0, < 13.6.5 → corregido en 13.6.5 · Aspire.Cli.linux-x64 (nuget) >= 13.3.0, < 13.6.5 → corregido en 13.6.5 · Aspire.Cli.linux-arm64 (nuget) >= 13.3.0, < 13.6.5 → corregido en 13.6.5 · Aspire.Cli.linux-musl-x64 (nuget) >= 13.3.0, < 13.6.5 → corregido en 13.6.5","url":"https://github.com/advisories/GHSA-m63f-xhvm-6mv5","published":"2026-11-11T00:30:06.000Z","updated":"2026-11-11T00:30:07.000Z","status":"active","tags":["nuget","npm"],"extra":{"cve":"CVE-2026-120778","ghsa":"GHSA-m63f-xhvm-6mv5","cvss":7.3,"packages":[{"ecosystem":"nuget","name":"Aspire.Cli","range":">= 13.2.0, < 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Cli.linux-x64","range":">= 13.3.0, < 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Cli.linux-arm64","range":">= 13.3.0, < 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Cli.linux-musl-x64","range":">= 13.3.0, < 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Cli.osx-x64","range":">= 13.3.0, < 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Cli.osx-arm64","range":">= 13.3.0, < 13.6.5","patched":"13.6.5"},{"ecosystem":"npm","name":"@microsoft/aspire-cli","range":">= 13.4.2, < 13.6.5","patched":"13.6.5"},{"ecosystem":"npm","name":"@microsoft/aspire-cli-linux-x64","range":">= 13.4.2, < 13.6.5","patched":"13.6.5"}],"epss":{"score":0.00444,"percentile":0.39085}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-wr8v-9x5q-ggcm","source":"github-advisories","category":"vulnerability","severity":"high","title":"Microsoft Security Advisory CVE-2026-114147 - ASP.NET Core Denial of Service Vulnerability","summary":"Microsoft.AspNetCore.SignalR.StackExchangeRedis (nuget) >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 → corregido en 11.0.0 · Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 → corregido en 11.0.0 · Microsoft.AspNetCore.App.Runtime.linux-arm64 (nuget) >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 → corregido en 11.0.0 · Microsoft.AspNetCore.App.Runtime.linux-musl-arm (nuget) >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 → corregido en 11.0.0","url":"https://github.com/advisories/GHSA-wr8v-9x5q-ggcm","published":"2026-11-11T00:23:32.000Z","updated":"2026-11-11T00:23:34.000Z","status":"active","tags":["nuget"],"extra":{"cve":"CVE-2026-114147","ghsa":"GHSA-wr8v-9x5q-ggcm","cvss":7.5,"packages":[{"ecosystem":"nuget","name":"Microsoft.AspNetCore.SignalR.StackExchangeRedis","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-arm","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-arm64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-x64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.osx-arm64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"}],"epss":{"score":0.013,"percentile":0.7089}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-67wp-ghc2-fw2g","source":"github-advisories","category":"vulnerability","severity":"high","title":"Microsoft Security Advisory CVE-2026-114146 - ASP.NET Core Elevation of Privilege Vulnerability","summary":"Microsoft.AspNetCore.Http.Connections (nuget) >= 1.2.0, <= 1.2.13 → corregido en 1.2.14 · Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 → corregido en 11.0.0 · Microsoft.AspNetCore.App.Runtime.linux-arm64 (nuget) >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 → corregido en 11.0.0 · Microsoft.AspNetCore.App.Runtime.linux-musl-arm (nuget) >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 → corregido en 11.0.0","url":"https://github.com/advisories/GHSA-67wp-ghc2-fw2g","published":"2026-11-11T00:21:56.000Z","updated":"2026-11-11T00:21:58.000Z","status":"active","tags":["nuget"],"extra":{"cve":"CVE-2026-114146","ghsa":"GHSA-67wp-ghc2-fw2g","cvss":7.8,"packages":[{"ecosystem":"nuget","name":"Microsoft.AspNetCore.Http.Connections","range":">= 1.2.0, <= 1.2.13","patched":"1.2.14"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-arm","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-arm64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-x64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.osx-arm64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"}],"epss":{"score":0.00758,"percentile":0.55768}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-f7vh-h5g3-7jrh","source":"github-advisories","category":"vulnerability","severity":"high","title":"Microsoft Security Advisory CVE-2026-120006 - Aspire Elevation of Privilege Vulnerability","summary":"Aspire.Hosting.AppHost (nuget) < 13.6.5 → corregido en 13.6.5 · Aspire.Hosting (nuget) < 13.6.5 → corregido en 13.6.5","url":"https://github.com/advisories/GHSA-f7vh-h5g3-7jrh","published":"2026-11-10T23:24:48.000Z","updated":"2026-11-10T23:24:49.000Z","status":"active","tags":["nuget"],"extra":{"cve":"CVE-2026-120006","ghsa":"GHSA-f7vh-h5g3-7jrh","cvss":7.5,"packages":[{"ecosystem":"nuget","name":"Aspire.Hosting.AppHost","range":"< 13.6.5","patched":"13.6.5"},{"ecosystem":"nuget","name":"Aspire.Hosting","range":"< 13.6.5","patched":"13.6.5"}],"epss":{"score":0.00353,"percentile":0.29486}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"ghsa:GHSA-x33c-w48q-qrgc","source":"github-advisories","category":"vulnerability","severity":"high","title":"Microsoft Security Advisory CVE-2026-114149 - ASP.NET Core Denial of Service Vulnerability","summary":"Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 → corregido en 11.0.0 · Microsoft.AspNetCore.App.Runtime.linux-arm64 (nuget) >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 → corregido en 11.0.0 · Microsoft.AspNetCore.App.Runtime.linux-musl-arm (nuget) >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 → corregido en 11.0.0 · Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (nuget) >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 → corregido en 11.0.0","url":"https://github.com/advisories/GHSA-x33c-w48q-qrgc","published":"2026-11-10T23:06:32.000Z","updated":"2026-11-10T23:06:34.000Z","status":"active","tags":["nuget"],"extra":{"cve":"CVE-2026-114149","ghsa":"GHSA-x33c-w48q-qrgc","cvss":7.5,"packages":[{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-arm","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-arm64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.linux-x64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.osx-arm64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"},{"ecosystem":"nuget","name":"Microsoft.AspNetCore.App.Runtime.osx-x64","range":">= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148","patched":"11.0.0"}],"epss":{"score":0.01298,"percentile":0.70855}},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:openai:01M7ATRS6BMZ61E4JDHJGM79Y0","source":"status-openai","category":"platform","severity":"medium","title":"OpenAI: Delayed Costs Data in the Compliance API","summary":"We’ve applied a mitigation and are monitoring the affected services to confirm recovery. Delays in cost data are still expected.","url":"https://status.openai.com/incidents/01M7ATRS6BMZ61E4JDHJGM79Y0","published":"2026-11-13T16:10:07.000Z","updated":"2026-11-13T18:56:45.000Z","status":"active","tags":["ia"],"extra":{"platform":"openai","phase":"monitoring","impact":"minor"},"first_seen":"2026-11-13T17:50:03.491Z","countries":[]},{"id":"status:twilio:hv25yyc4z5bl","source":"status-twilio","category":"platform","severity":"medium","title":"Twilio: SMS Delivery Delays from a Subset of Twilio Short Codes to Multiple Networks in India","summary":"Twilio customers may be experiencing SMS delivery delays from a subset of Twilio Short Codes to network subscribers on multiple networks in India. Our team has identified the cause, and is working to resolve the issue. We will provide another update in 4 hours or as soon as more information becomes available.","url":"https://stspg.io/4pmp24zbrkp0","published":"2026-11-13T15:37:04.331Z","updated":"2026-11-13T19:47:30.091Z","status":"active","tags":["comunicación","SMS, APAC"],"extra":{"platform":"twilio","phase":"identified","impact":"minor"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:cloudflare:e7ktq32gphhe","source":"status-cloudflare","category":"platform","severity":"medium","title":"Cloudflare: Cloudflare is seeing an issue with Workers API availability","summary":"A fix has been implemented and we are monitoring the results.","url":"https://www.cloudflarestatus.com/incidents/e7ktq32gphhe","published":"2026-11-13T15:31:13.772Z","updated":"2026-11-13T15:42:43.996Z","status":"active","tags":["infraestructura","Workers"],"extra":{"platform":"cloudflare","phase":"monitoring","impact":"minor"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:cloudflare:mc91s22odfvf","source":"status-cloudflare","category":"platform","severity":"medium","title":"Cloudflare: Cloudflare is currently having an issue with the r8.im registry used for Replicate model publishing and builds is currently restricted","summary":"The issue has been identified and a fix is being implemented.","url":"https://www.cloudflarestatus.com/incidents/mc91s22odfvf","published":"2026-11-13T14:55:26.180Z","updated":"2026-11-13T14:56:27.695Z","status":"active","tags":["infraestructura","Replicate"],"extra":{"platform":"cloudflare","phase":"identified","impact":"minor"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:netlify:84jj827kqwzf","source":"status-netlify","category":"platform","severity":"medium","title":"Netlify: Delayed Support Email Delivery to Microsoft 365 and Outlook Mailboxes","summary":"We are monitoring email delivery and will provide another update once delivery is back to normal.","url":"https://stspg.io/pz0hkk5cxxmc","published":"2026-11-13T10:29:28.822Z","updated":"2026-11-13T18:51:11.962Z","status":"active","tags":["infraestructura","Netlify Helpdesk"],"extra":{"platform":"netlify","phase":"monitoring","impact":"minor"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:twilio:byymx2cv0kt1","source":"status-twilio","category":"platform","severity":"medium","title":"Twilio: SMS Delivery Receipt Failures from Twilio to Claro Costa Rica","summary":"Twilio customers may be experiencing SMS delivery receipt failures from Twilio to Claro network subscribers in Costa Rica. Our team has identified the cause, and is working to resolve the issue. Message delivery may succeed, but delivery receipts may be failing. We will provide another update in 4 hours or as soon as…","url":"https://stspg.io/kwdmd91r9qjd","published":"2026-11-12T22:31:15.991Z","updated":"2026-11-13T20:06:21.347Z","status":"active","tags":["comunicación","SMS, Latin America"],"extra":{"platform":"twilio","phase":"identified","impact":"minor"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:twilio:7h6p6ss3xrnm","source":"status-twilio","category":"platform","severity":"medium","title":"Twilio: Email Delivery Delays to Microsoft Inboxes","summary":"Mail Delivery to Microsoft Inboxes has recovered at its pre-incident level and we continue to monitor and will provide another update in 2 hours or as soon as more information becomes available.","url":"https://stspg.io/6f5v3h5q1mkr","published":"2026-11-12T19:42:49.057Z","updated":"2026-11-13T18:45:00.436Z","status":"active","tags":["comunicación","API v3","SMTP","API v2"],"extra":{"platform":"twilio","phase":"monitoring","impact":"minor"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:zoom:8n4n9nsqcl33","source":"status-zoom","category":"platform","severity":"medium","title":"Zoom: Service Degradation Affecting Microsoft Integrations due to an underlying vendor issue.","summary":"We continue to work with our underlying vendor affecting Microsoft Integrations. Our team is actively working on a resolution, and we will keep you informed with timely updates as progress is made. Thank you for your patience.","url":"https://stspg.io/jth16cll1kcf","published":"2026-11-12T19:24:50.493Z","updated":"2026-11-13T18:00:05.293Z","status":"active","tags":["comunicación","Zoom Scheduler","Microsoft OneDrive for Organizations","Integrations/Calendar/Plug-In/Add-In"],"extra":{"platform":"zoom","phase":"identified","impact":"minor"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:openai:01M78GAT3AK9P9W8Z230KHFVE8","source":"status-openai","category":"platform","severity":"medium","title":"OpenAI: Elevated errors affecting the Microsoft 365 connector","summary":"We’re seeing signs of recovery for the Microsoft 365 connector and are continuing to monitor the affected services to confirm recovery.","url":"https://status.openai.com/incidents/01M78GAT3AK9P9W8Z230KHFVE8","published":"2026-11-12T18:29:14.000Z","updated":"2026-11-13T16:20:45.000Z","status":"active","tags":["ia"],"extra":{"platform":"openai","phase":"monitoring","impact":"minor"},"first_seen":"2026-11-13T17:50:03.491Z","countries":[]},{"id":"status:twilio:gd0nmpb378d3","source":"status-twilio","category":"platform","severity":"medium","title":"Twilio: Voice Call Silent and One-Way Audio from Colombia to a Subset of Twilio Phone Numbers","summary":"Twilio customers may be experiencing voice call silent and one-way audio from network subscribers in Colombia to a subset of Twilio Phone Numbers. Our team has identified the cause, and is working to resolve the issue. We will provide another update in 16 hours or as soon as more information becomes available.","url":"https://stspg.io/ppx46z753zjr","published":"2026-11-12T16:53:51.382Z","updated":"2026-11-13T09:40:09.648Z","status":"active","tags":["comunicación","Voice, Latin America"],"extra":{"platform":"twilio","phase":"identified","impact":"minor"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:cloudflare:0ocqieaifg7h","source":"status-cloudflare","category":"platform","severity":"medium","title":"Cloudflare: Changes to Cloudflare Workers are not producing Event Subscription events","summary":"The issue has been identified and a fix is being implemented.","url":"https://www.cloudflarestatus.com/incidents/0ocqieaifg7h","published":"2026-11-10T01:53:58.905Z","updated":"2026-11-11T05:05:06.331Z","status":"active","tags":["infraestructura","Workers","Queues"],"extra":{"platform":"cloudflare","phase":"identified","impact":"minor"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:twilio:m5yrng0zkwr5","source":"status-twilio","category":"platform","severity":"medium","title":"Twilio: SMS Delivery Receipt Delays from a Subset of Twilio Long Codes to Multiple Networks in Chile","summary":"Twilio customers may be experiencing SMS delivery receipt delays from a subset of Twilio Long Codes to network subscribers on multiple networks in Chile. Our team has identified the cause, and is working to resolve the issue. Message delivery may succeed, but delivery receipts may be delayed. We will provide another u…","url":"https://stspg.io/92y684hgthhn","published":"2026-11-06T21:21:41.223Z","updated":"2026-11-13T03:00:36.499Z","status":"active","tags":["comunicación","SMS, Latin America"],"extra":{"platform":"twilio","phase":"identified","impact":"minor"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"status:twilio:q0wmp98qd05h","source":"status-twilio","category":"platform","severity":"medium","title":"Twilio: Voice Call Failures From a Subset of Twilio Philippines Phone Numbers to Multiple Networks in Philippines","summary":"Twilio customers may be experiencing voice call failures from a subset of Twilio Philippines Phone Numbers to network subscribers on multiple networks in the Philippines. Our team has identified the cause, and is working to resolve the issue. We will provide another update in 24 hours or as soon as more information be…","url":"https://stspg.io/tbsjgc4grpsw","published":"2026-11-02T05:41:31.831Z","updated":"2026-11-13T14:17:55.456Z","status":"active","tags":["comunicación","Voice, APAC"],"extra":{"platform":"twilio","phase":"identified","impact":"minor"},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"certcc:644655","source":"cert-cc","category":"advisory","severity":"medium","title":"VU#644655: TightVNC and UltraVNC Viewer contains a heap-based buffer overflow","summary":"Overview A heap-based buffer overflow exists in the Tight JPEG decoding component of the TightVNC Windows Viewer version 1.3.10 and affected UltraVNC Windows Viewers. An attacker controlling a malicious VNC server can trigger memory corruption by sending a specially crafted screen update. Successful exploitation can c…","url":"https://kb.cert.org/vuls/id/644655","published":"2026-11-13T00:08:48.090Z","status":"active","tags":["coordinada"],"extra":{},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"certcc:580079","source":"cert-cc","category":"advisory","severity":"medium","title":"VU#580079: Arbitrary file read/write vulnerability in ImageMagick-based applications with default configuration","summary":"Overview Multiple arbitrary file read and write vulnerabilities have been identified in applications that use ImageMagick with insufficiently restrictive security policies. Collectively referred to as ImageTragick2 , these issues arise when ImageMagick processes attacker-controlled SVG or PostScript content using dang…","url":"https://kb.cert.org/vuls/id/580079","published":"2026-11-12T18:12:09.307Z","status":"active","tags":["coordinada"],"extra":{},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"certcc:944667","source":"cert-cc","category":"advisory","severity":"medium","title":"VU#944667: ComfyUI-Easy-Use contains unauthenticated path traversal vulnerability","summary":"Overview ComfyUI-Easy-Use version 1.4.1 and earlier contains a vulnerability in its save_preview() handler that allows an unauthenticated attacker to overwrite an installed custom node’s Python file. An attacker who can reach the affected ComfyUI instance over the network can use the overwrite to execute arbitrary cod…","url":"https://kb.cert.org/vuls/id/944667","published":"2026-11-12T15:20:05.725Z","status":"active","tags":["coordinada"],"extra":{},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"certcc:685399","source":"cert-cc","category":"advisory","severity":"medium","title":"VU#685399: PromZard context key code injection leads to remote code execution","summary":"Overview The npm library promzard , versions 4.0.0 and earlier, is vulnerable to remote code execution due to direct string interpolation of context object keys, which allows unsanitized JavaScript code injection. Description promzard is a Node.js library designed to automate configuration workflows by evaluating temp…","url":"https://kb.cert.org/vuls/id/685399","published":"2026-11-12T15:09:39.215Z","status":"active","tags":["coordinada"],"extra":{},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]},{"id":"certcc:385711","source":"cert-cc","category":"advisory","severity":"medium","title":"VU#385711: PrestaShop debug mode configuration allows PHP code injection","summary":"Overview PrestaShop's back-office Performance &gt; Debug mode functionality contains a PHP code injection vulnerability. An authenticated attacker with permission to modify debug-mode configuration can submit crafted cookie configuration values that are written into an executable PHP configuration file. Successful exp…","url":"https://kb.cert.org/vuls/id/385711","published":"2026-11-11T17:27:47.632Z","status":"active","tags":["coordinada"],"extra":{},"first_seen":"2026-11-13T17:49:42.067Z","countries":[]}]}