CVE-2026-43696

An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to capture Touch Bar content without authorization...

CVE-2026-43674

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication...

CVE-2026-28899

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may bypass Gatekeeper checks...

CVE-2026-19273

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to improper...

CVE-2026-12758 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers...

CVE-2026-12758

IBM Cloud Pak for Business Automation is vulnerable to an authorization bypass caused by improper validation of HTTP headers. A remote attacker with low privileges can exploit this to invoke restricted endpoints, resulting in low confidentiality and low integrity impact (CVSS 3.1 score 5.4, MEDIU...

EUVD-2026-78146

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to improper...

CVE-2026-19273

CVE-2026-19273 affects the Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway (Standard Edition), versions 6.2.0.0 through 6.2.0.6_2, 6.2.1.0–6.2.1.2, and 6.2.2.0–6.2.2.1. The root cause is improper authentication (CWE-287), which allows a remote authenticated attacker to bypa...

CVE-2026-19273 The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to improper...

CVE-2026-20127

CVE-2026-20127 — Cisco SD-WAN 中的身份验证绕过（CVSS 10.0） 目录 | 章节| 内容简介 ---|---|--- 01| SD-WAN 速成课| 在理解这一切之前我需要掌握的基础知识 — 架构、NETCONF 以及对等身份验证的工作原理 02| 门卫问题| 身份验证代码出错的地方 — 正常路径与故障路径的对比，以及最终让我豁然开朗的类比 03| 首次尝试，首次失败| 我理解该漏洞的第一次尝试 — 它成功了！……算是吧。我们碰壁了。 04| 顿悟时刻| 解开整个谜题的关键洞察 — 事实证明这个绕过能给你的远比我最初想象的要多 05| 通往王国的钥匙|...

CVE-2026-75792

IBM Sterling Secure Proxy versions 6.2.0.0 through 6.2.1.2 are affected by a client-side authorization bypass (CWE-285: Improper Authorization) that allows a remote authenticated attacker to view administrative user interface components . The vulnerability carries a CVSS 3.1 score of 4.3 (MEDIUM)...

CVE-2026-75792 IBM Sterling Secure Proxy is vulnerable to multiple issues

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authorization bypass...

EUVD-2026-78140

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authorization bypass...

CVE-2026-86909

CVE-2026-86909 is a logic issue in macOS Golden Gate 27 that affects Gatekeeper , Apple's application verification mechanism. The root cause is a flaw in state management, which was addressed with improved state handling in the fix. The practical impact is that an app may be able to bypass Gateke...

EUVD-2026-78123

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks...

EUVD-2026-78110

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system...

CVE-2026-86905

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

EUVD-2026-77951

An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access motion data from headphones without user consent...

CVE-2026-65404

CVE-2026-65404 is an authorization flaw in Apple's Accounts component, affecting iOS 18.7.10, iPadOS 18.7.10, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, and macOS Sonoma 14.8.8 . The root cause is a state-management issue that allows a malicious application to bypass Privacy p...

EUVD-2026-77946

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A malicious application may be able to bypass Privacy preferences...