GHSA-C494-M2FQ-59MX Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A use after free in Microsoft QUIC allows an...

Security Bulletin: IBM Db2 Mirror for i is vulnerable to OS command injection [CVE-2026-16956]

Summary IBM Db2 Mirror for i is vulnerable to OS command injection as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16956 DESCRIPTION: IBM Db2 Mirror for i could allow a remote attacker to execute arbitrary commands due to improper neutralization of special...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.17 Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslash character U+005C ...

CVE-2026-48414 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Commerce is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerabl...

CVE-2026-48414 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Commerce is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerabl...

CVE-2026-48416 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction...

CVE-2026-48416

CVE-2026-48416 affects Adobe Commerce with an Incorrect Authorization vulnerability (CWE-863) that could allow an attacker to bypass security controls and gain unauthorized read access. The issue reportedly requires no user interaction and has a CVSS v3.1 base score of 7.5 (HIGH) , with a network...

CVE-2026-48414

CVE-2026-48414 concerns Adobe Commerce (Magento) with a stored Cross-Site Scripting (XSS) vulnerability that can be triggered via vulnerable form fields by a low-privileged attacker. The attacker may inject malicious JavaScript, which could execute in a victim’s browser when visiting the affected...

CVE-2026-48416 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction...

CVE-2026-48413 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Commerce is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerabl...

CVE-2026-48413 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Commerce is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerabl...

CVE-2026-48413

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, exploitable by a low-privileged attacker to inject malicious scripts that run in a victim’s browser, potentially gaining elevated access or control over the account or session. The CVSS data...

CVE-2026-48415

CVE-2026-48415 affects Adobe Commerce and describes an Incorrect Authorization vulnerability that allows a low-privileged attacker to bypass security measures, gaining unauthorized read and write access with limited impact on availability. Exploitation does not require user interaction. The conne...

CVE-2026-48415 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability...

CVE-2026-48415 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability...

CVE-2026-48411 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require use...

CVE-2026-48411

CVE-2026-48411 : Adobe Commerce is affected by an Incorrect Authorization vulnerability that could bypass security features, allowing a user with high privileges to gain unauthorized write access. Exploitation requires network access, is possible without user interaction, and has a CVSSv3.1 base ...

CVE-2026-48411 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require use...

CVE-2026-48412 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction...

CVE-2026-48412 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction...