CVE-2026-75792 IBM Sterling Secure Proxy is vulnerable to multiple issues

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authorization bypass...

CVE-2026-75792

IBM Sterling Secure Proxy versions 6.2.0.0 through 6.2.1.2 are affected by a client-side authorization bypass (CWE-285: Improper Authorization) that allows a remote authenticated attacker to view administrative user interface components . The vulnerability carries a CVSS 3.1 score of 4.3 (MEDIUM)...

CVE-2026-75792 IBM Sterling Secure Proxy is vulnerable to multiple issues

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authorization bypass...

EUVD-2026-78140

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authorization bypass...

CVE-2026-84515

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to kernel memory corruption...

CVE-2026-84515

Apple has addressed an out-of-bounds write vulnerability in macOS affecting versions prior to Golden Gate 27 , Sequoia 15.8 , and Tahoe 26.7 . The root cause involves insufficient bounds checking, which could allow an attacker connecting to a malicious SMB server to trigger kernel memory corrupti...

CVE-2026-84515

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to kernel memory corruption...

CVE-2026-84549

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84549

CVE-2026-84549 is an out-of-bounds read in the NFS client on macOS, addressed with improved bounds checking. Connecting to a malicious NFS server may cause unexpected system termination or corrupted kernel memory . The NVD assigns a CVSS 3.1 score of 7.5 (High) with a vector of AV:N/AC:L/PR:N/UI:...

CVE-2026-84509

An out-of-bounds read vulnerability was identified in macOS affecting versions prior to Golden Gate 27 , Sequoia 15.8 , and Tahoe 26.7 . The flaw is caused by insufficient bounds checking and can be triggered by connecting to a malicious SMB server . This vulnerability may result in unexpected sy...

CVE-2026-84509

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...

CVE-2026-43677

An out-of-bounds write issue exists in macOS , which can be triggered by connecting to a malicious WebDAV server . This vulnerability can lead to unexpected app termination . The flaw was addressed by removing the vulnerable code, and a fix is available in macOS Golden Gate 27 , macOS Sequoia 15....

EUVD-2026-77995

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...

EUVD-2026-77776

Zephyr's TLS socket layer in subsys/net/lib/sockets/socketstls.c keeps a single process-global array, clientcache, of cached client sessions that is shared by every TLS socket context. The functions that mutate and read it — tlssessionsave, tlssessionget, tlssessioncachereset, and the settings...

CVE-2026-19543

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit...

CVE-2026-19543 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit...

CVE-2026-19543

IBM Common Licensing Agent and IBM LKS Administration and Reporting Tool (ART) , versions 9.0, 9.0.0.1, and 9.0.0.2 , perform input validation exclusively on the client side without enforcing equivalent restrictions on the server side. An attacker with local access can modify requests to bypass v...

EUVD-2026-77761

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit...

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues

Summary Multiple vulnerabilities CVE-2026-78415, CVE-2026-75792 affect IBM Sterling Secure Proxy and are addressed in the latest release and fixpack. Vulnerability Details CVEID:CVE-2026-78415 DESCRIPTION: IBM Sterling Secure Proxy could allow a remote authenticated attacker to perform UI spoofin...

OESA-2026-3801 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: A vulnerability, classified as critical, has been found in yhirose cpp-httplib up to version 0.33.0 and version 0.50.0. This is a CWE-416 Use...