168178 matches found
CVE-2026-16896 IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...
CVE-2026-16871
CVE-2026-16871 affects IBM i 7.3, 7.4, 7.5, and 7.6. The issue is a heap buffer overflow in NetServer that could allow a remote authenticated attacker to obtain sensitive information. Affected releases are IBM i 7.3–7.6; impact per the entry is limited to confidentiality (C: Low, I:N, A:N) with a...
CVE-2026-16867 IBM i is Affected By Multiple Vulnerabilities in NetServer
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...
CVE-2026-16867
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...
EUVD-2026-58373
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...
CVE-2026-16867
Technical details for CVE-2026-16867 are not publicly available in the provided documents. Monitor for updates from IBM and NVD for affected versions, impact, and fixes.
MINI-JH5H-F4G8-6RQ4
Bulletin has no description...
CVE-2026-16722 IBM i is Affected By An Unauthorized Privileges Vulnerability in SQL []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized privileges due to improper privilege management...
CVE-2026-16722
IBM i SQL vulnerability CVE-2026-16722 affects IBM i releases 7.6, 7.5, 7.4, and 7.3 (5770-SS1). A remote authenticated attacker could obtain unauthorized privileges due to improper privilege management. CVSS v3.1 base score 8.8 (High) with network access, low attack complexity, and no user inter...
CVE-2026-16692
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow...
CVE-2026-14525
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...
CVE-2026-14525
IBM WebSphere Application Server Liberty (versions 17.0.0.3–26.0.0.8) is affected by an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. The underlying issue is CWE-306: Missing Authentication for Critical Function, with CVSS v3.1 base score 9.4 (Network attack, ...
EUVD-2026-58362
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...
CVE-2026-14525 IBM WebSphere Application Server Liberty is affected by an authenication bypass
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...
EUVD-2026-58361
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI...
CVE-2026-13460
CVE-2026-13460 affects IBM Storage Scale GUI, with versions 5.2.3.0–5.2.3.8 and 6.0.0.0–6.0.1.0 containing a hardcoded token in the GUI source used for inter-node cluster communication and REST API authentication. The security bulletin indicates fixes in 5.2.3.9 or later and 6.0.1.1 or later. Rem...
CVE-2026-13460
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI...
CVE-2026-73654
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPathoperation.key.setnewMetadata, value in...
