CVE-2026-17494 Power System Buffer Overflow

IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system,...

EUVD-2026-62685

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with...

CVE-2026-17429 Power System Incorrect Authorization

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with...

CVE-2026-16930

Power Systems Firmware versions FW1120.00, FW1110.00–.30, and FW1060.00–.80 are affected by CWE-862 (Missing Authorization), allowing a privileged BMC/FSP user to execute arbitrary code on the host and all partitions. Upgrade to FW1110.31, FW1120.01, or FW1060.81 (or newer) per the IBM Security B...

CVE-2026-16930 Power System Missing Authorization

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system,...

CVE-2026-17093 Power System Buffer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level acce...

CVE-2026-17093 Power System Buffer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level acce...

CVE-2026-17093

IBM Power Systems firmware (FW950, FW1060, FW1110, FW1120, OP940) is vulnerable to CWE-121 stack-based buffer overflow in host firmware configuration parsing. An attacker with BMC/FSP service-level access can compromise the host firmware boot stage and everything subsequently loaded, with CVSS 8....

CVE-2026-17100 Power System Out-of-bounds Write

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access ...

EUVD-2026-62629

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access ...

CVE-2026-17100

IBM Power Systems Firmware is affected by an out-of-bounds write (CWE-787) in the service processor mailbox interface . An attacker with authenticated service-level access to the BMC/FSP can exploit this to execute arbitrary code in the host firmware runtime , gaining full control over the manage...

EUVD-2026-62682

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers th...

CVE-2026-19234

IBM Power Systems firmware (FW1120.00, FW1110.00–.30, FW1060.00–.80) suffers CWE-121 stack-based buffer overflow in the host boot image validation path. An attacker with service processor access can inject a malicious code update image, achieving arbitrary host code execution with HIGH confidenti...

Malicious code in ai-texts-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a340348046b89bf8c446a31a4f48233ec4e0bc412f531db713f54f35c6ea922c [email protected] declares a single runtime dependency, 'ai-texts', shipped as a bundledDependency inside the tarball. That bundled module present...

MAL-2026-14302 Malicious code in ai-texts-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a340348046b89bf8c446a31a4f48233ec4e0bc412f531db713f54f35c6ea922c [email protected] declares a single runtime dependency, 'ai-texts', shipped as a bundledDependency inside the tarball. That bundled module present...

CVE-2026-17565

The Animation Addons for Elementor WordPress plugin before 2.7.2 does not validate a user-supplied value before using it to build the host of a server-side HTTP request, allowing unauthenticated users to make the site issue requests to internal hosts and read the responses back...

EUVD-2026-62275

The Animation Addons for Elementor WordPress plugin before 2.7.2 does not validate a user-supplied value before using it to build the host of a server-side HTTP request, allowing unauthenticated users to make the site issue requests to internal hosts and read the responses back...

Malicious code in gaarf-node-bq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f61e7b586146a833e50d74ccdff68942b4514f66c38beca981d2ead87761633 gaarf-node-bq is a dependency-confusion / typosquat canary targeting the internal google/ads-api-report-fetcher gaarf package. The bin entry is an...

Malicious code in gaarf-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc539c4e835f015b5f7b9e65ca33a720e44ee0191e3bbf422085949e5d3029b9 The package's postinstall script runs automatically on npm install and collects host identifiers os.hostname, platform, arch, node version, package...

Malicious code in gaarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3312540cdedc807029a549ffd3b49b917704323a3b664c6d71ae6849c192b9 The package's postinstall lifecycle script runs automatically on npm install and collects installer host identifiers os.hostname, platform, arch, Nod...