CVE-2026-17186

IBM Db2 Mirror for i versions 7.4, 7.5 and 7.6 are affected by CVE-2026-17186, a high-severity vulnerability (OS command injection) that could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command. The issue impacts the GUI-facing...

CVE-2026-17182

CVE-2026-17182 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. It allows a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments (CWE-287). The vulnerability has a high impact: CVSS v3.1 base score 9.8 (...

CVE-2026-17181

IBM Db2 Mirror for i 7.4–7.6 is affected by CVE-2026-17181, a path traversal vulnerability that could allow a remote attacker to write files to arbitrary locations. The root cause is improper handling of file paths, enabling unauthorized file writes via network-accessible components. According to...

EUVD-2026-58760

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-17175

CVE-2026-17175 affects IBM Db2 Mirror for i (versions 7.4, 7.5, 7.6). Description: remote authenticated attacker could obtain sensitive information due to improper authentication enforcement. CVSS 3.1 base score 7.5 (HIGH), network attack vector, no user interaction required. Root cause: improper...

CVE-2026-17175

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...

EUVD-2026-58759

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...

EUVD-2026-58796

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...

CVE-2026-17079

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...

EUVD-2026-58794

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

CVE-2026-16905

CVE-2026-16905 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. Description: a remote authenticated attacker could obtain sensitive information due to improper authentication. CVSS v3.1 base score 5.3 (MEDIUM), vectors: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. Root cause: improper authenticat...

CVE-2026-16879 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...

CVE-2026-16708

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration...

CVE-2026-72970

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-72970

Technical details about CVE-2026-72970 are not publicly available in the provided documents. Monitor official vendor advisories and security bulletins for updates.

EUVD-2026-58723

kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the...

CVE-2026-47192

kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the...

CVE-2026-66271

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...

CVE-2026-57469

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery CSRF vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator,...

CVE-2026-66270

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...