SysAdmin 24x7
15 oct 2026, 00:02
Noticias y alertas de seguridad informática. Chat y contacto: t.me/sysadmin24x7chat
425
Last views
4.4k (4,430 subscribers)
Miembros
—
Rating
45
Total Posts
Oct 16, 2026, 1:17 PM
Actualizado
Apr 16, 2026
Created
Está viendo contenido en español. Para ver contenido en otros idiomas, cambie el idioma del sitio.
Channel Information
| Channel Name | SysAdmin 24x7 |
|---|---|
| Username | @sysadmin24x7 |
| Category | Noticias Tech |
| Language | español |
| Country | España |
| Miembros | 4,430 |
| Channel Type | Public Channel |
| Created | 16 abr 2026 |
| Last Updated | 16 oct 2026 • hace 5 días |
| Status | Active |
Clasificación
Clasificación global
#173608+185
Clasificación por idioma
#3335+11
Clasificación por categoría
#1720+4
Top 10 posts
Most viewed posts from this channel
- #1VMSA-2026-0005.1: VMware Avi Load Balancer addresses multiple vulnerab1.9K
- #2SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabiliti1.9K
- #3Microsoft - Aug 2026 Security Updates1.8K
- #4Neutralización incorrecta de elementos especiales en FortiSandbox de F1.8K
- #5CISA Urges SharePoint Hardening After New Exploitations1.7K
- #6SAP Security Patch Day - August 20261.7K
- #7VMSA-2026-0007: VMware Workstation and Fusion updates address integer-1.6K
- #8Microsoft - July 2026 Security Updates1.4K
- #9Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin fo1.4K
- #10VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates a1.4K
Últimas publicaciones
SysAdmin 24x7
03 oct 2026, 02:03
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-96940
Security Vulnerability
Released: Oct 2, 2026
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96940
CVE-2026-96940
Security Vulnerability
Released: Oct 2, 2026
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96940
SysAdmin 24x7
28 sept 2026, 02:05
Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778
Description of Problem
Multiple vulnerabilities have been discovered in Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway). Refer below for further details.
Affected Versions:
The following supported versions of Citrix NetScaler ADC and Citrix NetScaler Gateway are affected by the vulnerabilities:
Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 BEFORE 14.1-73.37
Citrix NetScaler ADC and Citrix NetScaler Gateway 13.1 BEFORE 13.1-64.23
Citrix NetScaler ADC FIPS BEFORE 14.1-73.37 FIPS
Citrix NetScaler ADC FIPS and NDcPP BEFORE 13.1-37.279
Additional Note: Secure Private Access Hybrid deployments using NetScaler instances are also affected by the vulnerabilities. Customers need to upgrade these NetScaler instances to the recommended NetScaler builds to address the vulnerabilities.
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096
Description of Problem
Multiple vulnerabilities have been discovered in Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway). Refer below for further details.
Affected Versions:
The following supported versions of Citrix NetScaler ADC and Citrix NetScaler Gateway are affected by the vulnerabilities:
Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 BEFORE 14.1-73.37
Citrix NetScaler ADC and Citrix NetScaler Gateway 13.1 BEFORE 13.1-64.23
Citrix NetScaler ADC FIPS BEFORE 14.1-73.37 FIPS
Citrix NetScaler ADC FIPS and NDcPP BEFORE 13.1-37.279
Additional Note: Secure Private Access Hybrid deployments using NetScaler instances are also affected by the vulnerabilities. Customers need to upgrade these NetScaler instances to the recommended NetScaler builds to address the vulnerabilities.
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096
SysAdmin 24x7
28 sept 2026, 02:03
Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771 through CVE-2026-88778
Guidance for customers on newly addressed vulnerabilities and recommended updates
As the cybersecurity landscape continues to evolve, organizations across the industry are seeing changes in the pace, scale, and complexity of vulnerability research, discovery, and analysis. AI-assisted research and automation may contribute to this shift by enabling faster identification and validation of certain classes of security issues. Citrix continues to invest in secure development, security testing, coordinated disclosure, and vulnerability response processes.
Citrix has released updates for NetScaler ADC and NetScaler Gateway to address multiple security vulnerabilities. These vulnerabilities vary by deployment configuration and enabled features, and include issues that could allow remote code execution, denial of service, HTTP request smuggling, policy bypass, and TCP initial sequence number prediction under specific conditions.
Exploitation of CVE-2026-88771 and CVE-2026-88772 on unmitigated NetScaler deployments has been observed. Citrix strongly urges affected customers to install the relevant updated versions as soon as possible.
https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778/
Guidance for customers on newly addressed vulnerabilities and recommended updates
As the cybersecurity landscape continues to evolve, organizations across the industry are seeing changes in the pace, scale, and complexity of vulnerability research, discovery, and analysis. AI-assisted research and automation may contribute to this shift by enabling faster identification and validation of certain classes of security issues. Citrix continues to invest in secure development, security testing, coordinated disclosure, and vulnerability response processes.
Citrix has released updates for NetScaler ADC and NetScaler Gateway to address multiple security vulnerabilities. These vulnerabilities vary by deployment configuration and enabled features, and include issues that could allow remote code execution, denial of service, HTTP request smuggling, policy bypass, and TCP initial sequence number prediction under specific conditions.
Exploitation of CVE-2026-88771 and CVE-2026-88772 on unmitigated NetScaler deployments has been observed. Citrix strongly urges affected customers to install the relevant updated versions as soon as possible.
https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778/
Citrix Community
Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771 through CVE-2026-88778
Guidance for customers on newly addressed vulnerabilities and recommended updates As the cybersecurity landscape continues to evolve, organizations across the industry are seeing changes in the pace, scale, and complexity of vulnerability research, discovery…
SysAdmin 24x7
09 sept 2026, 00:45
SysAdmin 24x7
05 sept 2026, 18:44
VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)
Advisory ID: VMSA-2026-0007
Advisory Severity: Critical
CVSSv3 Range: 8.1-9.3
Synopsis:
VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)
Issue date: 2026-09-03
CVE(s) CVE-2026-59346, CVE-2026-59347
Impacted Products
VMware Workstation
VMware Fusion
Introduction
An integer-overflow and a buffer-overflow vulnerabilities in VMware Workstation and Fusion were privately reported to Broadcom. Updates are available to remediate these vulnerabilities in affected Broadcom products.
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38288
Advisory ID: VMSA-2026-0007
Advisory Severity: Critical
CVSSv3 Range: 8.1-9.3
Synopsis:
VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)
Issue date: 2026-09-03
CVE(s) CVE-2026-59346, CVE-2026-59347
Impacted Products
VMware Workstation
VMware Fusion
Introduction
An integer-overflow and a buffer-overflow vulnerabilities in VMware Workstation and Fusion were privately reported to Broadcom. Updates are available to remediate these vulnerabilities in affected Broadcom products.
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38288
SysAdmin 24x7
05 sept 2026, 17:34
SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability (CVE-2026-28318)
Summary
SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate.
Affected Products
SolarWinds Serv-U 15.5.4 and below
Fixed Software Release
SolarWinds Serv-U 15.5.4 HF1
https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318
Summary
SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate.
Affected Products
SolarWinds Serv-U 15.5.4 and below
Fixed Software Release
SolarWinds Serv-U 15.5.4 HF1
https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318
SysAdmin 24x7
05 sept 2026, 17:34
CNA: VulnCheck
Updated: 2026-06-04
Published: 2026-06-04
Title: WordPress Plugin ad manager wd 1.0.11 Arbitrary File Download
Description
WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the path parameter. Attackers can send GET requests to the edit.php endpoint with export=export_csv and a malicious path parameter to read arbitrary files like wp-config.php accessible to the web server.
https://www.cve.org/CVERecord?id=CVE-2019-25727
Updated: 2026-06-04
Published: 2026-06-04
Title: WordPress Plugin ad manager wd 1.0.11 Arbitrary File Download
Description
WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the path parameter. Attackers can send GET requests to the edit.php endpoint with export=export_csv and a malicious path parameter to read arbitrary files like wp-config.php accessible to the web server.
https://www.cve.org/CVERecord?id=CVE-2019-25727
SysAdmin 24x7
05 sept 2026, 17:34
SysAdmin 24x7
05 sept 2026, 17:34
Vulnerability Resolved in Veeam Backup & Replication 12.3.2.4854
KB ID: 4869
Product: Veeam Backup & Replication | 12 | 12.1 | 12.2 | 12.3 | 12.3.1 | 12.3.2
Published: 2026-06-09
CVE-2026-44963
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.
Severity: Critical
https://www.veeam.com/kb4869
KB ID: 4869
Product: Veeam Backup & Replication | 12 | 12.1 | 12.2 | 12.3 | 12.3.1 | 12.3.2
Published: 2026-06-09
CVE-2026-44963
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.
Severity: Critical
https://www.veeam.com/kb4869
SysAdmin 24x7
05 sept 2026, 17:34
VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
Advisory ID: VMSA-2026-0004
Advisory Severity: Important
CVSSv3 Range: 8.0
Synopsis:
VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
Issue date: 2026-06-08
CVE(s) CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724
Impacted Products
VMware Aria Operations
VMware Cloud Foundation Operations
VMware Cloud Foundation
VMware vSphere Foundation
VMware Telco Cloud Platform
Introduction
Multiple vulnerabilities in VMware Cloud Foundation Operations were privately reported to Broadcom. Patches and updates are available to remediate these vulnerabilities in affected Broadcom products.
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37513
Advisory ID: VMSA-2026-0004
Advisory Severity: Important
CVSSv3 Range: 8.0
Synopsis:
VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
Issue date: 2026-06-08
CVE(s) CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724
Impacted Products
VMware Aria Operations
VMware Cloud Foundation Operations
VMware Cloud Foundation
VMware vSphere Foundation
VMware Telco Cloud Platform
Introduction
Multiple vulnerabilities in VMware Cloud Foundation Operations were privately reported to Broadcom. Patches and updates are available to remediate these vulnerabilities in affected Broadcom products.
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37513
SysAdmin 24x7
05 sept 2026, 17:34
Desbordamiento de búfer en productos Poly Voice de HP
Fecha 02/06/2026
Importancia 5 - Crítica
Recursos Afectados
HP Poly VVX con versiones anteriores a UCS 6.4.8;
HP Poly Trio 8300 con versiones anteriores a UCS 8.1.7;
HP Poly Trio 8500 con versiones anteriores UCS 7.2.8;
HP Poly Trio 8800 con versiones anteriores a UCS 7.2.8.
Descripción
Stephen Fewer, de Rapid7, ha reportado una vulnerabilidad de severidad crítica que, en caso de ser explotada, podría permitir a un atacante la ejecución remota de código comprometiendo la confidencialidad, integridad y disponibilidad de los sistemas afectados.
Solución
HP recomienda actualizar los dispositivos afectados a las versiones de firmware corregidas publicadas mediante HP Poly Lens.
Como medida de mitigación adicional, se recomienda deshabilitar la conectividad ICE (Interactive Connectivity Establishment) cuando no sea necesaria.
https://www.incibe.es/incibe-cert/alerta-temprana/avisos/desbordamiento-de-bufer-en-productos-poly-voice-de-hp
Fecha 02/06/2026
Importancia 5 - Crítica
Recursos Afectados
HP Poly VVX con versiones anteriores a UCS 6.4.8;
HP Poly Trio 8300 con versiones anteriores a UCS 8.1.7;
HP Poly Trio 8500 con versiones anteriores UCS 7.2.8;
HP Poly Trio 8800 con versiones anteriores a UCS 7.2.8.
Descripción
Stephen Fewer, de Rapid7, ha reportado una vulnerabilidad de severidad crítica que, en caso de ser explotada, podría permitir a un atacante la ejecución remota de código comprometiendo la confidencialidad, integridad y disponibilidad de los sistemas afectados.
Solución
HP recomienda actualizar los dispositivos afectados a las versiones de firmware corregidas publicadas mediante HP Poly Lens.
Como medida de mitigación adicional, se recomienda deshabilitar la conectividad ICE (Interactive Connectivity Establishment) cuando no sea necesaria.
https://www.incibe.es/incibe-cert/alerta-temprana/avisos/desbordamiento-de-bufer-en-productos-poly-voice-de-hp
SysAdmin 24x7
12 ago 2026, 18:30
SysAdmin 24x7
12 ago 2026, 18:27
SAP Security Patch Day - August 2026
https://support.sap.com/en/my-support/knowledge-base/security-notes-news/august-2026.html
https://support.sap.com/en/my-support/knowledge-base/security-notes-news/august-2026.html
SysAdmin 24x7
07 ago 2026, 11:32
VMSA-2026-0005.1: VMware Avi Load Balancer addresses multiple vulnerabilities (CVE-2026-47865, CVE-2026-47866, CVE-2026-47867, CVE-2026-47868, CVE-2026-47869, CVE-2026-47870, CVE-2026-47871)
Advisory ID: VMSA-2026-0005.1
Advisory Severity: Critical
CVSSv3 Range: 7.1 - 9.8
Synopsis:
VMware Avi Load Balancer addresses multiple vulnerabilities (CVE-2026-47865, CVE-2026-47866, CVE-2026-47867, CVE-2026-47868, CVE-2026-47869, CVE-2026-47870, CVE-2026-47871)
Issue date: 2026-07-14
Updated on: 2026-08-07
1. Impacted Products
VMware Avi Load Balancer
2. Introduction
Multiple vulnerabilities in Avi Load Balancer were privately reported to Broadcom. Patches are available to remediate these vulnerabilities in the affected Broadcom product.
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926
Advisory ID: VMSA-2026-0005.1
Advisory Severity: Critical
CVSSv3 Range: 7.1 - 9.8
Synopsis:
VMware Avi Load Balancer addresses multiple vulnerabilities (CVE-2026-47865, CVE-2026-47866, CVE-2026-47867, CVE-2026-47868, CVE-2026-47869, CVE-2026-47870, CVE-2026-47871)
Issue date: 2026-07-14
Updated on: 2026-08-07
1. Impacted Products
VMware Avi Load Balancer
2. Introduction
Multiple vulnerabilities in Avi Load Balancer were privately reported to Broadcom. Patches are available to remediate these vulnerabilities in the affected Broadcom product.
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926
SysAdmin 24x7
05 ago 2026, 23:11
Keyv and friends compromised in active Shai-Hulud supply chain attack
On August 4, 2026, attackers compromised the GitHub account of the maintainer behind keyv, a key-value storage library with roughly 127 million weekly npm downloads, and used that access to inject a credential-stealing worm across the entire package family. The same maintainer owns cacheable (29M downloads/month), flat-cache (565M downloads/month), file-entry-cache (557M downloads/month), and several other widely-used caching utilities, all of which were swept up in the same attack.
https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack
On August 4, 2026, attackers compromised the GitHub account of the maintainer behind keyv, a key-value storage library with roughly 127 million weekly npm downloads, and used that access to inject a credential-stealing worm across the entire package family. The same maintainer owns cacheable (29M downloads/month), flat-cache (565M downloads/month), file-entry-cache (557M downloads/month), and several other widely-used caching utilities, all of which were swept up in the same attack.
https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack
www.aikido.dev
Keyv and friends compromised in npm supply chain attack
Mini Shai-Hulud malware was injected into keyv and eight related npm packages on August 4, 2026 after an attacker compromised the maintainer's GitHub account
SysAdmin 24x7
31 jul 2026, 03:31
Feliz SysAdminDay a tod@s
Día del Administrador de Sistemas Informáticos
Viernes 31 de julio de 2026
Día del Administrador de Sistemas Informáticos
Viernes 31 de julio de 2026
SysAdmin 24x7
29 jul 2026, 17:14
VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)
Advisory ID: VMSA-2026-0006
Advisory Severity: Critical
CVSSv3 Range: 2.7-9.8
Synopsis:
VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)
Issue date: 2026-07-29
CVE(s) CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709
Impacted Products
VMware ESX
VMware vCenter
VMware Workstation
VMware Fusion
VMware Cloud Foundation
VMware vSphere Foundation
VMware Telco Cloud Platform
VMware Telco Cloud Infrastructure
Introduction
Multiple vulnerabilities in VMware ESX, vCenter, Workstation, and Fusion were privately reported to Broadcom. Updates are available to remediate these vulnerabilities in affected Broadcom products.
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017
Advisory ID: VMSA-2026-0006
Advisory Severity: Critical
CVSSv3 Range: 2.7-9.8
Synopsis:
VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)
Issue date: 2026-07-29
CVE(s) CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709
Impacted Products
VMware ESX
VMware vCenter
VMware Workstation
VMware Fusion
VMware Cloud Foundation
VMware vSphere Foundation
VMware Telco Cloud Platform
VMware Telco Cloud Infrastructure
Introduction
Multiple vulnerabilities in VMware ESX, vCenter, Workstation, and Fusion were privately reported to Broadcom. Updates are available to remediate these vulnerabilities in affected Broadcom products.
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017
SysAdmin 24x7
23 jul 2026, 03:31
Oracle Critical Patch Update Advisory - July 2026
https://www.oracle.com/security-alerts/cpujul2026.html
https://www.oracle.com/security-alerts/cpujul2026.html
SysAdmin 24x7
15 jul 2026, 12:24
SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
Advisory ID SNWLID-2026-0008
First Published 2026-07-14
Workaround false
Status Applicable
CVE CVE-2026-15409, CVE-2026-15410
CWE CWE-918, CWE-94
CVSS v3 10.0
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008
Advisory ID SNWLID-2026-0008
First Published 2026-07-14
Workaround false
Status Applicable
CVE CVE-2026-15409, CVE-2026-15410
CWE CWE-918, CWE-94
CVSS v3 10.0
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008
SysAdmin 24x7
15 jul 2026, 12:20
CISA Urges SharePoint Hardening After New Exploitations
Release DateJuly 14, 2026
CISA is aware of active exploitation of vulnerabilities CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, enabling cyber threat actors to gain unauthorized access to on-premises SharePoint Server instances.
https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations
Release DateJuly 14, 2026
CISA is aware of active exploitation of vulnerabilities CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, enabling cyber threat actors to gain unauthorized access to on-premises SharePoint Server instances.
https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations
SysAdmin 24x7
15 jul 2026, 11:28
SysAdmin 24x7
10 jul 2026, 02:20
Neutralización incorrecta de elementos especiales en FortiSandbox de Fortinet
Fecha 09/07/2026
Importancia 5 - Crítica
Recursos Afectados
FortiSandbox 5.0: versiones desde 5.0.0 a 5.0.5;
FortiSandbox 4.4: versiones desde 4.4.0 a 4.4.8;
FortiSandbox Cloud 5.0: versiones desde 5.0.4 a 5.0.5;
FortiSandbox PaaS 5.0: versiones desde 5.0.4 a 5.0.5.
Descripción
Adham El Karn, del equipo de seguridad de productos de Fortinet, ha reportado una vulnerabilidad de severidad critica que, en caso de ser explotada, podría permitir a un atacante ejecutar código o comandos no autorizados.
https://www.incibe.es/incibe-cert/alerta-temprana/avisos/neutralizacion-incorrecta-de-elementos-especiales-en-fortisandbox-de-fortinet
Fecha 09/07/2026
Importancia 5 - Crítica
Recursos Afectados
FortiSandbox 5.0: versiones desde 5.0.0 a 5.0.5;
FortiSandbox 4.4: versiones desde 4.4.0 a 4.4.8;
FortiSandbox Cloud 5.0: versiones desde 5.0.4 a 5.0.5;
FortiSandbox PaaS 5.0: versiones desde 5.0.4 a 5.0.5.
Descripción
Adham El Karn, del equipo de seguridad de productos de Fortinet, ha reportado una vulnerabilidad de severidad critica que, en caso de ser explotada, podría permitir a un atacante ejecutar código o comandos no autorizados.
https://www.incibe.es/incibe-cert/alerta-temprana/avisos/neutralizacion-incorrecta-de-elementos-especiales-en-fortisandbox-de-fortinet
www.incibe.es
Neutralización incorrecta de elementos especiales en FortiSandbox de Fortinet
Adham El Karn, del equipo de seguridad de productos de Fortinet, ha reportado una vulnerabilidad de se
SysAdmin 24x7
05 jul 2026, 14:57
GitHub
GitHub - J-jaeyoung/bad-epoll
Contribute to J-jaeyoung/bad-epoll development by creating an account on GitHub.
SysAdmin 24x7
03 jul 2026, 20:36
[Actualización 02/07/2026] Falsificación de solicitudes del lado del servidor en productos de Cisco
Fecha 04/06/2026
Importancia 4 - Alta
Recursos Afectados
Cisco Unified CM, versión 14, y Unified CM SME, versión 15, si tienen habilitado el servicio WebDialer.
Descripción
Cisco ha publicado una vulnerabilidad de severidad alta que podría permitir a un atacante remoto, no autenticado, realizar ataques de falsificación de solicitudes del lado del servidor (SSRF) a través de un dispositivo afectado.
[Actualización 02/07/2026] El equipo PSIRT de Cisco tiene conocimiento de que existe código de prueba de concepto para explotar la vulnerabilidad descrita en este aviso.
Solución
Actualizar a las versiones 14SU6 y 15SU5 (septiembre de 2026) o COP 1, respectivamente.
https://www.incibe.es/incibe-cert/alerta-temprana/avisos/falsificacion-de-solicitudes-del-lado-del-servidor-en-productos-de-cisco
Fecha 04/06/2026
Importancia 4 - Alta
Recursos Afectados
Cisco Unified CM, versión 14, y Unified CM SME, versión 15, si tienen habilitado el servicio WebDialer.
Descripción
Cisco ha publicado una vulnerabilidad de severidad alta que podría permitir a un atacante remoto, no autenticado, realizar ataques de falsificación de solicitudes del lado del servidor (SSRF) a través de un dispositivo afectado.
[Actualización 02/07/2026] El equipo PSIRT de Cisco tiene conocimiento de que existe código de prueba de concepto para explotar la vulnerabilidad descrita en este aviso.
Solución
Actualizar a las versiones 14SU6 y 15SU5 (septiembre de 2026) o COP 1, respectivamente.
https://www.incibe.es/incibe-cert/alerta-temprana/avisos/falsificacion-de-solicitudes-del-lado-del-servidor-en-productos-de-cisco
www.incibe.es
[Actualización 02/07/2026] Falsificación de solicitudes del lado del servidor en productos de Cisco
Cisco ha publicado una vulnerabilidad de severidad alta que podría permitir a un atacante remoto, no a
SysAdmin 24x7
03 jul 2026, 20:35
Múltiples vulnerabilidades en NetScaler de Citrix
Fecha 03/07/2026
Importancia 4 - Alta
Recursos Afectados
NetScaler ADC y NetScaler Gateway 14.1 anteriores a 14.1-72.61;
NetScaler ADC y NetScaler Gateway 13.1 anteriores a 13.1-63.18;
FIPS de NetScaler ADC anteriores a 14.1-72.61 FIPS;
Compatibilidad con FIPS y NDcPP de NetScaler ADC anteriores a la versión 13.1-37.272.
Descripción
Citrix ha publicado 6 vulnerabilidades: 5 de severidad alta y 1 de severidad media que, en caso de ser explotadas, podrían permitir a un atacante leer la memoria, provocar un comportamiento impredecible o una denegación de servicio.
Solución
Cloud Software Group insta a los clientes afectados a que instalen las versiones actualizadas correspondientes.
NetScaler ADC y NetScaler Gateway versiones 14.1-72.61 y posteriores.
NetScaler ADC y NetScaler Gateway 13.1-63.18 y versiones posteriores de 13.1.
NetScaler ADC 14.1-FIPS 14.1-72.61 FIPS y versiones posteriores de 14.1-FIPS.
NetScaler ADC 13.1-FIPS y 13.1-NDcPP 13.1.37.272 y versiones posteriores de 13.1-FIPS y 13.1-NDcPP.
https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-netscaler-de-citrix
Fecha 03/07/2026
Importancia 4 - Alta
Recursos Afectados
NetScaler ADC y NetScaler Gateway 14.1 anteriores a 14.1-72.61;
NetScaler ADC y NetScaler Gateway 13.1 anteriores a 13.1-63.18;
FIPS de NetScaler ADC anteriores a 14.1-72.61 FIPS;
Compatibilidad con FIPS y NDcPP de NetScaler ADC anteriores a la versión 13.1-37.272.
Descripción
Citrix ha publicado 6 vulnerabilidades: 5 de severidad alta y 1 de severidad media que, en caso de ser explotadas, podrían permitir a un atacante leer la memoria, provocar un comportamiento impredecible o una denegación de servicio.
Solución
Cloud Software Group insta a los clientes afectados a que instalen las versiones actualizadas correspondientes.
NetScaler ADC y NetScaler Gateway versiones 14.1-72.61 y posteriores.
NetScaler ADC y NetScaler Gateway 13.1-63.18 y versiones posteriores de 13.1.
NetScaler ADC 14.1-FIPS 14.1-72.61 FIPS y versiones posteriores de 14.1-FIPS.
NetScaler ADC 13.1-FIPS y 13.1-NDcPP 13.1.37.272 y versiones posteriores de 13.1-FIPS y 13.1-NDcPP.
https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-netscaler-de-citrix
www.incibe.es
Múltiples vulnerabilidades en NetScaler de Citrix
Citrix ha publicado 6 vulnerabilidades: 5 de severidad alta y 1 de severidad media que, en caso de ser
SysAdmin 24x7
28 abr 2026, 16:07
Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities
Advisory ID: cisco-sa-ise-rce-traversal-8bYndVrZ
First Published: 2026 April 15 16:00 GMT
Version 1.0: Final
Cisco Bug IDs: CSCws52717 CSCws52738
CVSS Score: Base 9.9
Vulnerable Products
These vulnerabilities affect Cisco ISE and Cisco ISE-PIC, regardless of device configuration
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZ
Advisory ID: cisco-sa-ise-rce-traversal-8bYndVrZ
First Published: 2026 April 15 16:00 GMT
Version 1.0: Final
Cisco Bug IDs: CSCws52717 CSCws52738
CVSS Score: Base 9.9
Vulnerable Products
These vulnerabilities affect Cisco ISE and Cisco ISE-PIC, regardless of device configuration
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZ
SysAdmin 24x7
28 abr 2026, 16:07
Cisco Identity Services Engine Remote Code Execution Vulnerabilities
Advisory ID: cisco-sa-ise-rce-4fverepv
First Published: 2026 April 15 16:00 GMT
Version 1.0: Final
Cisco Bug IDs: CSCwq21242 CSCwq22993
CVSS Score: Base 9.9
Vulnerable Products
These vulnerabilities affect Cisco ISE, regardless of device configuration
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-4fverepv
Advisory ID: cisco-sa-ise-rce-4fverepv
First Published: 2026 April 15 16:00 GMT
Version 1.0: Final
Cisco Bug IDs: CSCwq21242 CSCwq22993
CVSS Score: Base 9.9
Vulnerable Products
These vulnerabilities affect Cisco ISE, regardless of device configuration
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-4fverepv
SysAdmin 24x7
28 abr 2026, 16:07
Cisco Webex Services Certificate Validation Vulnerability
Advisory ID: cisco-sa-webex-cui-cert-8jSZYhWL
First Published: 2026 April 15 16:00 GMT
Version 1.0: Final
Cisco Bug IDs: CSCwt37111
CVSS Score: Base 9.8
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-cui-cert-8jSZYhWL
Advisory ID: cisco-sa-webex-cui-cert-8jSZYhWL
First Published: 2026 April 15 16:00 GMT
Version 1.0: Final
Cisco Bug IDs: CSCwt37111
CVSS Score: Base 9.8
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-cui-cert-8jSZYhWL
SysAdmin 24x7
28 abr 2026, 16:07
Múltiples vulnerabilidades en Identity Exposure de Tenable
Fecha 15/04/2026
Importancia 5 - Crítica
Recursos Afectados
Tenable Identity Exposure, versión 3.77.16 y anteriores.
Descripción
Tenable ha publicado un aviso donde informa de 19 vulnerabilidades, 1 de severidad crítica, 10 altas, 6 medias y 3 bajas. En caso de ser explotadas podrían permitir la lectura de ficheros sensibles, entre otras acciones.
Solución
Actualizar el producto a la versión 3.77.17.
https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-identity-exposure-de-tenable
Fecha 15/04/2026
Importancia 5 - Crítica
Recursos Afectados
Tenable Identity Exposure, versión 3.77.16 y anteriores.
Descripción
Tenable ha publicado un aviso donde informa de 19 vulnerabilidades, 1 de severidad crítica, 10 altas, 6 medias y 3 bajas. En caso de ser explotadas podrían permitir la lectura de ficheros sensibles, entre otras acciones.
Solución
Actualizar el producto a la versión 3.77.17.
https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-identity-exposure-de-tenable
Showing 30 of 45 posts
Calificación
Se requiere iniciar sesión
Todavía no hay reseñas. ¡Sea el primero en compartir su experiencia!
Frequently Asked Questions
¿De qué trata el canal de Telegram SysAdmin 24x7?+
SysAdmin 24x7 (@sysadmin24x7) es un canal de Telegram en Noticias Tech en tgdio. Este perfil muestra ranking, valoraciones, reseñas y publicaciones recientes para decidir antes de suscribirte. Actualmente lista unos 4430 suscriptores en tgdio.
¿Cómo me uno a SysAdmin 24x7 (@sysadmin24x7) en Telegram?+
Abre el perfil del canal en tgdio y usa Join / Open in Telegram para ir a @sysadmin24x7 y suscribirte gratis.
¿Es SysAdmin 24x7 un buen canal de Noticias Tech?+
En tgdio puedes ver la valoración, reseñas, ranking y publicaciones de SysAdmin 24x7 antes de unirte. Actualmente lista unos 4430 suscriptores en tgdio. Compáralo con canales similares de Noticias Tech.
¿Dónde veo las estadísticas y publicaciones de SysAdmin 24x7?+
En tgdio, abre la página de @sysadmin24x7 para estadísticas, ranking, valoraciones y publicaciones. Usa Stats para gráficos de crecimiento.
