{"id":170,"date":"2026-07-03T14:34:21","date_gmt":"2026-07-03T14:34:21","guid":{"rendered":"https:\/\/blog.netvision.com.py\/?p=170"},"modified":"2026-07-03T14:46:04","modified_gmt":"2026-07-03T14:46:04","slug":"boletin-de-noticias-de-vulnerabilidades-del-cert-py-julio-2026-2","status":"publish","type":"post","link":"https:\/\/blog.netvision.com.py\/?p=170","title":{"rendered":"Boletin de noticias de vulnerabilidades del CERT-PY &#8211; Julio 2026."},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Este informe detalla una gran cantidad de vulnerabilidades cr\u00edticas que afectan a infraestructuras y software ampliamente utilizados en entornos corporativos y de servidores.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Vulnerabilidades en productos Vim<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidades destacadas y criticidad:<br>\u2022CVE-2026-52860:CVSSde7.5<br>\u2022CVE-2026-52858:CVSSde7.3<br>\u2022CVE-2026-47162:CVSSde7.3<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-vim\/\">https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-vim\/<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Vulnerabilidades en productos GitLab<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidades destacadas y criticidad:<br>\u2022CVE-2026-6552:CVSSde8.7<br>\u2022CVE-2026-10087:CVSSde8.7<br>\u2022CVE-2026-7250:CVSSde7.5<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-gitlab-13\">https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-gitlab-13<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Vulnerabilidades en productos Fortinet<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidades destacadas y criticidad:<br>\u2022CVE-2026-39813:CVSSde9.1<br>\u2022CVE-2026-39808:CVSSde9.1<br>\u2022CVE-2026-39815:CVSSde7.9<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-fortinet-10\">https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-fortinet-10<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Vulnerabilidad en productos Palo Alto<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidaddestacadaycriticidad:<br>\u2022CVE-2026-0274:CVSSde8.1<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-palo-alto-3\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-palo-alto-3<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Vulnerabilidad en productos Joomla<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidad destacada y criticidad:<br>\u2022CVE-2026-48907:CVSSde10.0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-joomla\/\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-joomla\/<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">6. Vulnerabilidad en productos MongoDB<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidad destacada y criticidad:<br>\u2022CVE-2026-11933:CVSSde8.8<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-mongodb-4\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-mongodb-4<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">7. Vulnerabilidad en productos Zyxel<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidaddestacadaycriticidad:<br>\u2022CVE-2026-7273:CVSSde8.8<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-zyxel-2\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-zyxel-2<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">8. Vulnerabilidad en componente UEFI<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidaddestacadaycriticidad:<br>\u2022CVE-2026-8863:CVSSde7.8<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-componente-uefi\/\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-componente-uefi\/<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">9. Vulnerabilidades en productos MariaDB<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidades destacadas y criticidad:<br>\u2022CVE-2026-49261:CVSSde10.0<br>\u2022CVE-2026-48165:CVSSde8.0<br>\u2022CVE-2026-48163:CVSSde8.0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-mariadb\">https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-mariadb<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">10. Vulnerabilidades en productos OpenSSL<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidades destacadas y criticidad:<br>\u2022CVE-2026-45447:CVSSde8.8<br>\u2022CVE-2026-7383:CVSSde8.1<br>\u2022CVE-2026-9076:CVSSde7.5<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-openssl\/\">https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-openssl\/<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">11. Vulnerabilidades en productos QNAP<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidades destacadas y criticidad:<br>\u2022CVE-2025-66276:CVSSde9.2<br>\u2022CVE-2026-41539:CVSSde8.7<br>\u2022CVE-2026-24719:CVSSde8.6<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-qnap-4\">https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-qnap-4<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">12. Vulnerabilidades en productos TP-Link<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidades destacadas y criticidad:<br>\u2022CVE-2026-8714:CVSSde7.1<br>\u2022CVE-2026-34123:CVSSde7.0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-tp-link-6\">https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-tp-link-6<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">13. Vulnerabilidades en productos Spring<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidades destacadas y criticidad:<br>\u2022CVE-2026-40983:CVSSde7.5<br>\u2022CVE-2026-40984:CVSSde7.5<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-spring-9\">https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-spring-9<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">14. Vulnerabilidad en productos Progress<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidad destacada y criticidad:<br>\u2022CVE-2026-8037:CVSSde9.6<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-progress-2\/\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-progress-2\/<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">15. Vulnerabilidad en productos SQLite<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidad destacada y criticidad:<br>\u2022CVE-2025-71316:CVSSde9.8<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-sqlite\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-sqlite<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">16. Vulnerabilidad en productos Laravel<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidad destacada y criticidad:<br>\u2022CVE-2026-48019:CVSSde8.9<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-laravel\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-laravel<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">17. Vulnerabilidad en productos Python<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidad destacada y criticidad:<br>\u2022CVE-2026-9669:CVSSde8.2<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-python-2\/\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-python-2\/<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">18. Vulnerabilidad en productos MISP<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidad destacada y criticidad:<br>\u2022CVE-2026-10868:CVSSde9.0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-misp-2\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-misp-2<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">19. Vulnerabilidades en productos MongoDB<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidades destacadas y criticidad:<br>\u2022CVE-2026-9740:CVSSde8.7<br>\u2022CVE-2026-9742:CVSSde8.2<br>\u2022CVE-2026-9753:CVSSde8.1<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-mongodb-3\/\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-mongodb-3\/<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">20. Vulnerabilidad en productos Jenkins<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidad destacada y criticidad:<br>\u2022CVE-2026-53435:CVSSde8.8<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-jenkins-3\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-jenkins-3<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">21. Vulnerabilidades en productos Qualcomm<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidades destacadas y criticidad:<br>\u2022CVE-2026-25276:CVSSde8.8<br>\u2022CVE-2026-25277:CVSSde8.8<br>\u2022CVE-2025-59605:CVSSde7.8<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-qualcomm-8\">https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-qualcomm-8<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">22. Vulnerabilidades en productos Palo Alto<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidades destacadas y criticidad:<br>\u2022CVE-2026-0257:CVSSde7.8<br>\u2022CVE-2026-0263:CVSSde7.2<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-palo-alto-3\">https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-palo-alto-3<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">23. Vulnerabilidad en productos Fortinet<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilidad destacada y criticidad:<br>\u2022CVE-2026-25089:CVSSde9.1<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s informaci\u00f3n:<br><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-fortinet-5\">https:\/\/www.cert.gov.py\/vulnerabilidad-en-productos-fortinet-5<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Recomendaciones para administradores<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Dada la cantidad y severidad de estas vulnerabilidades, se recomienda encarecidamente a los departamentos de TI:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Auditar los sistemas:<\/strong> Verificar si cuentan con alguno de los productos mencionados en sus entornos de producci\u00f3n.<\/li>\n\n\n\n<li><strong>Priorizar parches:<\/strong> Aplicar las actualizaciones de seguridad proporcionadas por cada fabricante de manera prioritaria, especialmente para los productos con CVSS de 9.0 en adelante.<\/li>\n\n\n\n<li><strong>Monitoreo:<\/strong> Consultar la fuente oficial para obtener detalles t\u00e9cnicos espec\u00edficos y pasos de mitigaci\u00f3n para cada CVE.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Puedes acceder al informe completo y a todos los enlaces de referencia en la p\u00e1gina oficial del <strong>CERT-PY<\/strong>:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/www.cert.gov.py\/\">Acceder al sitio web del CERT-PY<\/a><\/strong><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><small><em>Fuente: Resumen de Avisos de Seguridad N\u00b028, CERT-PY (Ministerio de Tecnolog\u00edas de la Informaci\u00f3n y Comunicaci\u00f3n, Paraguay)[cite: 1].<\/em><\/small><\/p>\n","protected":false},"excerpt":{"rendered":"<p>El equipo del CERT-PY ha publicado su Resumen de Avisos de Seguridad N\u00b029, correspondiente a la primera quincena de Julio de 2026<\/p>\n","protected":false},"author":3,"featured_media":154,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-170","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyberseguridad"],"_links":{"self":[{"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/posts\/170","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=170"}],"version-history":[{"count":14,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/posts\/170\/revisions"}],"predecessor-version":[{"id":186,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/posts\/170\/revisions\/186"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/media\/154"}],"wp:attachment":[{"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=170"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=170"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=170"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}