CVE-2026-89094

creationtimestamp| type| source ---|---|--- 2026-09-10 21:42:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117248919367381106 2026-09-10 22:08:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv72urrr3j2t 2026-09-10 22:20:07+00:00| seen|...

CVE-2026-80378

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains an improper authorization flaw that a remote authenticated attacker can exploit to cause a denial of service . The CVSS 3.1 score is 8.5 (HIGH) , with a changed scope, low integrity impact, and high availability impact. The CVE title references...

CVE-2026-80380

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by cross-site request forgery (CSRF) , allowing a remote attacker with no privileges but requiring user interaction to perform unauthorized actions. The flaw is attributed to open source software components within the product, as indicated b...

CVE-2026-80434 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and cause a denial of service due to an insecure direct object reference...

CVE-2026-81554 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...

CVE-2026-82092 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...

CVE-2026-82095 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-82098 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-82099

CVE-2026-82099 affects IBM DataStage on Cloud Pak for Data 5.4.0.0 , where a remote authenticated attacker can execute arbitrary code due to OS command injection (CWE-78) — improper neutralization of special elements in an OS command. The vulnerability is network-exploitable with low complexity a...

CVE-2026-82099 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-82100 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-82107 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authentication...

CVE-2026-75731

creationtimestamp| type| source ---|---|--- 2026-09-10 21:19:07+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y4cqaxs2k...

CVE-2026-4130

creationtimestamp| type| source ---|---|--- 2026-09-10 20:54:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv6wr6md342c...

CVE-2026-89049

creationtimestamp| type| source ---|---|--- 2026-09-10 19:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6rhjxnwz22 2026-09-14 15:30:32+00:00| seen| https://bsky.app/profile/newsfacts.bsky.social/post/3mvigipepbk2a 2026-09-14 23:06:45+00:00| seen|...

CVE-2026-89043

creationtimestamp| type| source ---|---|--- 2026-09-10 19:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6qvntudj22 2026-09-10 20:09:01+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6u6yq6fm2r...

CVE-2026-88051

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and sizeused from a .traineddata model without a cap or an invariant check. reservereserved allocates the backin...

UBUNTU-CVE-2026-88053

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATAINTTEMP component of a crafted .traineddata file and uses those values as loop bounds without validati...

CVE-2026-88053

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATAINTTEMP component of a crafted .traineddata file and uses those values as loop bounds without validati...

CVE-2026-88049

creationtimestamp| type| source ---|---|--- 2026-09-10 18:05:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4snaaeueunf7v 2026-09-15 09:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvkd7nokwu24...