CVE-2026-73419 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

CVE-2026-19297

IBM Langflow OSS 1.0.0–1.9.6 is affected by CVE-2026-19297 due to CWE-307: insufficient restriction of excessive authentication attempts, enabling a remote attacker to obtain unauthorized access to user accounts. The IBM Security Bulletin notes a rate-limiting mechanism for POST /api/v1/login, co...

EUVD-2026-58475

IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to improper restriction of excessive authentication attempts...

EUVD-2026-58399

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...

CVE-2026-73491 vulnerabilities

Vulnerabilities for packages: pghero-fips, ruby4.0-rails, pghero, ruby3.4-rails, ruby3.2-rails, ruby3.3-rails...

EUVD-2026-58398

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...

CVE-2026-73418 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips, jitsucom-jitsu...

CVE-2026-17074

CVE-2026-17074 affects IBM i versions 7.6, 7.5, 7.4, and 7.3 in the DRDA/DDM (Distributed Relational Database Architecture / Distributed Data Management) component. The root cause is improper privilege management (CWE-269), allowing a remote authenticated attacker to bypass security restrictions....

CVE-2026-73655

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser in apps/webapp/app/models/user.server.ts without requiring Google'...

CVE-2026-18164

An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state...

CVE-2026-16867

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...

CVE-2026-14525

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...

CVE-2026-73655

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser in apps/webapp/app/models/user.server.ts without requiring Google'...

CVE-2026-16896 IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...

CVE-2026-16867 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...

CVE-2026-16867

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...

CVE-2026-16867

CVE-2026-16867 affects IBM i (versions 7.3–7.6) in the NetServer component. The root cause is improper authentication during NTLM session negotiation (CWE-287), allowing a remote attacker to access server resources with the privileges of an authenticated user. NVD assigns a CVSS 3.1 score of 9.8 ...

CVE-2026-14525

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...

CVE-2026-14525

IBM WebSphere Application Server Liberty (versions 17.0.0.3–26.0.0.8) is affected by an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. The underlying issue is CWE-306: Missing Authentication for Critical Function, with CVSS v3.1 base score 9.4 (Network attack, ...

EUVD-2026-58362

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...