CVE-2026-18178

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by CVE-2026-18178, a path traversal issue that could allow a remote authenticated attacker to delete arbitrary files. Root cause: improper handling of file paths enabling traversal. Affected product: IBM Db2 Mirror for i (7.4/7.5/7.6). ...

EUVD-2026-58769

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal...

CVE-2026-18178

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal...

CVE-2026-17184

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by CVE-2026-17184, enabling a remote attacker to execute arbitrary code due to external control of a file name or path. The issue affects the GUI and related components of IBM Db2 Mirror for i. IBM’s bulletin lists remediation via platf...

CVE-2026-17184

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path...

EUVD-2026-58765

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path...

EUVD-2026-58764

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments...

CVE-2026-17182

CVE-2026-17182 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. It allows a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments (CWE-287). The vulnerability has a high impact: CVSS v3.1 base score 9.8 (...

CVE-2026-17181

IBM Db2 Mirror for i 7.4–7.6 is affected by CVE-2026-17181, a path traversal vulnerability that could allow a remote attacker to write files to arbitrary locations. The root cause is improper handling of file paths, enabling unauthorized file writes via network-accessible components. According to...

CVE-2026-17181

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path traversal...

EUVD-2026-58762

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path traversal...

CVE-2026-17173

IBM Db2 Mirror for i 7.4–7.6 is affected by CVE-2026-17173, a path-traversal vulnerability caused by improper validation of file paths that could allow a remote authenticated attacker to obtain sensitive information. Affected versions: 7.4, 7.5, 7.6. Remediation: apply IBM PTFs SJ10947 (7.4), SJ1...

CVE-2026-17173

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths...

EUVD-2026-58798

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths...

CVE-2026-17081

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by CVE-2026-17081, where improper limitation of a pathname to a restricted directory could allow a remote attacker to write arbitrary files. The IBM security bulletin lists this alongside other vulnerabilities in the same product and ca...

EUVD-2026-58797

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-17081

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-45699

CVE-2026-45699 affects Netatalk (afpd) on Unix-like systems, with vulnerable versions 3.1.19–4.4.2. A stack-based buffer overflow arises in copydir() due to an integer underflow when calculating remaining buffer space for path construction, causing boundary checks against de->d_name to pass an...

EUVD-2026-58790

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

CVE-2026-45699 Netatalk has Integer Underflow → Stack Buffer Overflow in copydir()

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...