EUVD-2026-57427

When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the data plane connects with TLS peer verification disabled, and the dataplane authentication token is sent over that unverified connection. An on-path actor can intercept the dataplane...

CVE-2026-73327

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as the reported behavior is intentional. The update process is designed to write files to disk and is restricted to the highest-privilege users working with cryptographically verified Joomla archives...

CVE-2026-17266

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-16860

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...

CVE-2026-73327

...

CVE-2026-73327

The Initial Description states "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Joomla is a CNA in scope." This CVE ID is rejected/not used and does not represent an active vulnerability entry.

EUVD-2026-57390

Joomla 6.1.1 contains a path traversal vulnerability in the comjoomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory traversal sequences or absolute paths in ZIP entry filenames. Attackers can supply malicious ZIP entry names with...

CVE-2026-73327

...

CVE-2026-73327 Joomla 6.1.1 Zip Slip Path Traversal via com_joomlaupdate extract.php

Joomla 6.1.1 contains a path traversal vulnerability in the comjoomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory traversal sequences or absolute paths in ZIP entry filenames. Attackers can supply malicious ZIP entry names with...

CVE-2026-16860

CVE-2026-16860 affects IBM i releases 7.3–7.6 (5770-SS1). A remote authenticated attacker can execute arbitrary code due to an uncontrolled search path element. The vulnerability, tracked by IBM with a base CVSS v3.1 score of 9.9 (CRITICAL), is triggered by improper handling of search paths in th...

CVE-2026-16860 IBM i is Affected By Remote Code Execution Vulnerability []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...

EUVD-2026-57379

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...

CVE-2026-17266

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-17266 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

EUVD-2026-57364

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-17266

IBM i (7.6, 7.5, 7.4, 7.3) is affected by CVE-2026-17266 in Navigator for i, a path traversal flaw that could allow a remote authenticated attacker to obtain sensitive information by improper limitation of a pathname to a restricted directory. CVSS base 6.5 (Network, Low attacker effort, Privileg...

CVE-2026-18106

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied path input...

CVE-2026-17094

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and manipulate files due to a path traversal vulnerability...

CVE-2026-17094

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and manipulate files due to a path traversal vulnerability...

CVE-2026-17094

CVE-2026-17094 is a CWE-22 path traversal flaw in IBM i's Navigator for i component (versions 7.3–7.6), allowing a remote authenticated attacker to read sensitive files and manipulate arbitrary files on the system. IBM rates it CVSS 4.3 (MEDIUM) with low integrity impact; NVD rates it 7.1 (HIGH) ...