175150 matches found
CVE-2026-17075
IBM i 7.3 through 7.6 is vulnerable (CWE-287: Improper Authentication) to remote attackers obtaining sensitive information and performing unauthorized operations via improper authentication token validation. Fixes are available: PTF SJ10904 for 7.3, SJ10905 for 7.4, SJ10906 for 7.5, and SJ10907 f...
CVE-2026-17075 IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information and perform unauthorized operations due to improper validation of authentication tokens...
CVE-2026-8715
CVE-2026-8715 – Vault Secrets Operator : Affected versions are 1.3.0–1.4.1 of Vault Secrets Operator. The issue is an arbitrary file read/credential exfiltration in the AppRole authentication configuration that could allow a tenant with limited Kubernetes RBAC to read files from the operator pod ...
EUVD-2026-58400
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their...
CVE-2026-8715
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their...
CVE-2026-17101 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...
CVE-2026-17101 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...
CVE-2026-17101
CVE-2026-17101 is an improper authentication vulnerability (CWE-287) in Navigator for i on IBM i versions 7.3, 7.4, 7.5, and 7.6. A remote attacker with no prior privileges but requiring user interaction can execute arbitrary code or obtain sensitive information, with changed scope and high impac...
CVE-2026-17101
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...
EUVD-2026-58399
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...
CVE-2026-73491 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, pghero-fips, ruby3.3-rails, gitlab-rails-ce-fips, ruby4.0-rails, gitlab-rails-ce, pghero...
CVE-2026-17099
CVE-2026-17099 affects IBM i 7.3–7.6 and could allow a remote attacker to obtain sensitive information due to improper authentication. The IBM advisory lists Navigator for i as the affected component with a base CVSS v3.1 score of 7.3 (Network, Low attack complexity, None privileges, Confidential...
CVE-2026-17099
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...
EUVD-2026-58398
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...
CVE-2026-17099 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...
CVE-2026-73418 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse, langfuse-fips...
CVE-2026-17074
CVE-2026-17074 affects IBM i versions 7.6, 7.5, 7.4, and 7.3 in the DRDA/DDM (Distributed Relational Database Architecture / Distributed Data Management) component. The root cause is improper privilege management (CWE-269), allowing a remote authenticated attacker to bypass security restrictions....
CVE-2026-73655
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser in apps/webapp/app/models/user.server.ts without requiring Google'...
CVE-2026-72643
Kibana Agent Builder determines whether a caller owns a private agent by comparing a stable user identifier when one is recorded, and falling back to a comparison of the username when it is not. A username is not unique across Elasticsearch authentication realms, so two distinct principals that...