14254 matches found
CVE-2026-18713
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...
CVE-2026-18713
IBM i (7.3–7.6) is affected by CVE-2026-18713: Navigator for i contains a privilege-escalation flaw that could allow an authenticated user to elevate to root and run commands. IBM lists this under multipleNavigator-for-i vulnerabilities; the issue is addressed with PTFs SJ10887/SJ10888/SJ10890/SJ...
EUVD-2026-57359
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...
CVE-2026-18713
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...
CVE-2026-18683
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...
EUVD-2026-57347
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...
CVE-2026-18683
IBM i 7.6/7.5/7.4/7.3 are affected by CVE-2026-18683, a privilege-escalation flaw in Navigator for i. An authenticated user could elevate privileges to root and execute commands. Root cause involves improper access control in Navigator for i on IBM i. Affected components/versions: IBM i 7.3–7.6. ...
CVE-2026-18683
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...
PT-2026-71350
Name of the Vulnerable Software and Affected Versions WolfStack versions prior to 25.9.2 Description A hard-coded cluster-authentication secret is compiled into every build and published as a constant in src/auth/mod.rs. This allows remote unauthenticated attackers to bypass authentication by...
CVE-2026-66148
An authenticated command injection vulnerability was identified in GMS Command-Line Interface CLI 9.5.1 Build 9510.1044 and earlier versions which allows low-privileged local user to execute system commands with root privileges...
EUVD-2026-56942
An authenticated command injection vulnerability was identified in GMS Command-Line Interface CLI 9.5.1 Build 9510.1044 and earlier versions which allows low-privileged local user to execute system commands with root privileges...
CVE-2026-69108
A vulnerability has been identified in Siemens License Server SLS All versions V5.1. The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to...
EUVD-2026-56125
A vulnerability has been identified in Siemens License Server SLS All versions V5.1. The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to...
CVE-2026-69108
CVE-2026-69108 affects Siemens License Server (SLS) versions all
CVE-2026-69108
A vulnerability has been identified in Siemens License Server SLS All versions V5.1. The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to...
CVE-2026-72533
An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...
EUVD-2026-56003
An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...
CVE-2026-72533 Portainer Portainer CE - Authentication Bypass
An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...
CVE-2026-72533 Portainer Portainer CE - Authentication Bypass
An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...
CVE-2026-72533
The CVE concerns Portainer CE (up to 2.44.0) with an authentication bypass in the Docker proxy path validation. Authenticated low-privilege users can bypass proxy authorization checks through non-canonical URL normalization, causing the proxy and authorization layer to interpret crafted requests ...