Una señal es cualquier evento operacional detectado en las últimas 24h–30d: CVEs en KEV explotados activamente, advisories de vendor, exposición cloud, ransomware y avisos regulatorios. Cada señal se prioriza por severidad, freshness y match con tu Digital Twin.
Para análisis editorial y noticias generales visita Noticias.
Priority Command Strip
Discover muestra 8 señales operativas recientes. Sube a Consultant Pro o Professional Pro para abrir el feed completo, histórico ampliado y el catálogo KEV.
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. Vendors: Linux. DORA relevance: high.
Filtered for operational relevance. Powered by a curated catalog of vulnerability, CERT, vendor and threat-intelligence sources.View methodology →
Explotación activa confirmada. Riesgo material para entornos expuestos.
Por qué importa
CVE de alto impacto sobre Linux. Planificar ventana de parche.
Acción recomendada
Avisa a los owners de los stacks Linux.
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro VPN. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2026-67212. CVEs: CVE-2026-67212. Vendors: OpenSSL, Trend Micro. DORA relevance: high.
Por qué importa
CVE de alto impacto sobre OpenSSL / Trend Micro. Planificar ventana de parche.
Acción recomendada
Comprueba la exposición a CVE-2026-67212 en el inventario de activos y las herramientas de vulnerabilidades.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NGINX. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-27654. CVEs: CVE-2026-27654. Vendors: NGINX. DORA relevance: high.
Por qué importa
CVE de alto impacto sobre NGINX. Planificar ventana de parche.
Acción recomendada
Comprueba la exposición a CVE-2026-27654 en el inventario de activos y las herramientas de vulnerabilidades.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Clam AntiVirus. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 8.4. The following CVEs are assigned: CVE-2026-20215. CVEs: CVE-2026-20215. Vendors: Cisco. DORA relevance: high.
Por qué importa
CVE de alto impacto sobre Cisco. Planificar ventana de parche.
Acción recomendada
Comprueba la exposición a CVE-2026-20215 en el inventario de activos y las herramientas de vulnerabilidades.
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of dnsmasq. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-4890. CVEs: CVE-2026-4890. DORA relevance: high.
Por qué importa
CVE crítica/alta con vector técnico relevante.
Acción recomendada
Comprueba la exposición a CVE-2026-4890 en el inventario de activos y las herramientas de vulnerabilidades.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24232. CVEs: CVE-2026-24232. DORA relevance: high.
Por qué importa
CVE crítica/alta con vector técnico relevante.
Acción recomendada
Comprueba la exposición a CVE-2026-24232 en el inventario de activos y las herramientas de vulnerabilidades.
This vulnerability allows local attackers to escalate privileges on affected installations of Gen Digital CCleaner. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-12410. CVEs: CVE-2026-12410. DORA relevance: high.
Por qué importa
CVE crítica/alta con vector técnico relevante.
Acción recomendada
Comprueba la exposición a CVE-2026-12410 en el inventario de activos y las herramientas de vulnerabilidades.
This vulnerability allows local attackers to escalate privileges on affected installations of Norton Utilities Ultimate. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-13962. CVEs: CVE-2024-13962. Vendors: Trend Micro. DORA relevance: high.
Por qué importa
CVE de alto impacto sobre Trend Micro. Planificar ventana de parche.
Acción recomendada
Comprueba la exposición a CVE-2024-13962 en el inventario de activos y las herramientas de vulnerabilidades.