PT-2026-89659

Уязвимость программных платформ для разработки и управления онлайн магазинами Magento Open Source, Adobe Commerce и Adobe Commerce B2B связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти ограничения безопасности...

Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code...

CVE-2026-86437

creationtimestamp| type| source ---|---|--- 2026-09-07 23:06:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7j7akxumrsw6e...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-0865 DESCRIPTION: User-controlled header names and values containing newlines can allow injecting HTTP headers. CWE:CWE-74: Improper Neutralization of...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-27459 DESCRIPTION: pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-42960 DESCRIPTION: NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-48713 DESCRIPTION: Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings when used to persist missing translation...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-81551 DESCRIPTION: DataStage on Cloud Pak for Data could allow a remote authenticated attacker to arbitrarily write to or delete files on shared storage...

CVE-2026-86494

creationtimestamp| type| source ---|---|--- 2026-09-07 18:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mux3ob5m3e2v 2026-09-07 18:56:55+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3mux6rbojem2p...

CVE-2026-86506

creationtimestamp| type| source ---|---|--- 2026-09-07 17:53:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/32vak5f4bwndz...

CVE-2026-86503

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

CVE-2026-86503

JetBrains IntelliJ IDEA versions before 2026.2.2 are vulnerable to Server-Side Request Forgery (SSRF) when opening an untrusted project. The flaw is triggered through Kubernetes spec-source URL fetching , allowing a crafted project to cause the IDE to issue requests to attacker-controlled URLs. T...

CVE-2026-86503

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

CVE-2026-86503

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

EUVD-2026-72519

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

CVE-2026-86430

creationtimestamp| type| source ---|---|--- 2026-09-07 15:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/adymq3lw4sihz 2026-09-12 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdtdqrfdp24...

CVE-2026-53797

A symlink race condition in rsync's source tree traversal allows a low-privileged local attacker to access unauthorized files. By atomically replacing a parent directory component with a symlink during an active transfer, the attacker can redirect file reads outside the intended transfer root,...

CVE-2026-86426

creationtimestamp| type| source ---|---|--- 2026-09-07 14:07:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwombeul522 2026-09-08 18:08:31+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3muzmjo32o42g 2026-09-09 15:00:07+00:00| confirmed|...

CVE-2026-76578

creationtimestamp| type| source ---|---|--- 2026-09-07 14:07:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwolpyl3e2f 2026-09-07 16:24:54+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muwwbhovtm2o 2026-09-07 16:35:04+00:00| seen|...

CVE-2026-86429

creationtimestamp| type| source ---|---|--- 2026-09-07 14:04:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muwogkzu462e 2026-09-12 19:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdro5dz722r...