260881 matches found
CVE-2026-17083
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-13361
IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...
CVE-2026-13361
IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...
CVE-2026-17642
CVE-2026-17642 affects IBM i releases 7.3–7.6 in the Resource Monitoring and Control (RMC) component. It allows a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command (OS Command Injection, CWE-78). The IBM bulletin l...
CVE-2026-17642 IBM i is Affected By Remote Code Execution Vulnerabilities [, ]
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-18099
Affected product: IBM i (7.3, 7.4, 7.5, 7.6). Vulnerability: CVE-2026-18099 allows a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input. Impact: high likelihood of code execution with privileges; CVSS v3.1 base score 8.9 (AV:N/AC...
CVE-2026-18099 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input...
EUVD-2026-57520
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-17083
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-17083 IBM i is Affected By Multiple Vulnerabilities in the Debug Server
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-17083
CVE-2026-17083 affects IBM i 7.3–7.6 and is related to the Debug Server. It enables remote code execution via a stack-based buffer overflow in the Debug Server component. The IBM bulletin lists affected releases and provides fixes: 7.6 SJ10899, 7.5 SJ10903, 7.4 SJ10915, and 7.3 SJ10916, with upgr...
CVE-2026-17417
CVE-2026-17417 affects IBM i versions 7.3–7.6. It enables a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in Resource Monitoring and Control. CVSS 3.1 base score 8.8 (NETWORK/LOW, PRIVILEGES REQUIRED: LOW, USER INTERACTION: NONE...
CVE-2026-17417 IBM i is Affected By Remote Code Execution Vulnerabilities [, ]
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters...
CVE-2026-19656 ScadaLTS Authenticated Remote Code Execution
ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user including one holding only low-privilege, read-only permissions to execute arbitrary operating system commands on the host. Successful exploitation results in code execution in the conte...
CVE-2026-19656
CVE-2026-19656 affects ScadaLTS 2.7.8.1, where a server-side method lacks authorization checks. Any authenticated user (even with low-privilege, read-only rights) can execute arbitrary operating system commands on the host, yielding code execution in the ScadaLTS server process (root) and full sy...
CVE-2026-19656
ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user including one holding only low-privilege, read-only permissions to execute arbitrary operating system commands on the host. Successful exploitation results in code execution in the conte...
CVE-2026-73327
Joomla 6.1.1 contains a path traversal vulnerability in the comjoomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory traversal sequences or absolute paths in ZIP entry filenames. Attackers can supply malicious ZIP entry names with...
CVE-2026-18669
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engine component. An authenticated attacker can execute a maliciously planted script with root authority...