CVE-2026-17006

CVE-2026-17006 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A heap buffer overflow allows a remote attacker on an adjacent network to execute arbitrary code without authentication or user interaction. The CVSS 3.1 score is 8.3 (HIGH) with a scope change and high impact on confidentiality, ...

CVE-2026-17000

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have an improper authentication flaw allowing remote attackers to execute arbitrary code (CVSS 8.1 HIGH). IBM's support page (https://www.ibm.com/support/pages/node/7283858) is the primary reference; no exploit details or patch version are provided in the docu...

CVE-2026-17000 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper authentication...

CVE-2026-16996 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow...

CVE-2026-16996

CVE-2026-16996 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The vulnerability is an integer underflow that allows a local attacker with low privileges to execute arbitrary code , with changed scope and high impact on confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ). CISA ...

CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability

...

CVE-2026-69419

An integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code remotely. Microsoft's update guide is the reference; no specific affected version, patch, or exploit details are provided in the documents.

CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability

...

CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability

...

CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

...

CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

...

CVE-2026-65770

Azure Managed Instance for Apache Cassandra is affected by an argument injection vulnerability (improper neutralization of argument delimiters in a command) that allows an unauthorized attacker to execute code over a network without any privileges or user interaction. The CVSS 3.1 score is 10.0 (...

CVE-2026-16951

A heap-based buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local authenticated attacker to execute arbitrary code. CVSS 6.7 (MEDIUM) reflects the high privileges required. No exploit or patch details are provided in the documents. The IBM support page (linked in references) sho...

CVE-2026-16951 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability

...

CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability

...

CVE-2026-69836

CVE-2026-69836 is a CVSS 10.0 (Critical) deserialization of untrusted data vulnerability in Microsoft Entra ID (formerly Azure Active Directory), enabling an unauthorized attacker to achieve remote code execution over a network with no privileges or user interaction required. The vulnerability wa...

CVE-2026-55765

CloudNativePG (a Kubernetes-based PostgreSQL management platform) prior to 1.28.4 and 1.29.2 embedded cleartext role passwords in ALTER ROLE and CREATE ROLE statements generated by SetUserPassword and appendPasswordOption. When pg_stat_statements was preloaded with track_utility enabled, an untru...

EUVD-2026-63685

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG embedded cleartext role passwords in ALTER ROLE and CREATE ROLE statements generated by SetUserPassword in pkg/management/postgres/utils/roles.go and...

[SECURITY] [DSA 6455-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6455-1 [email protected] https://www.debian.org/security/ Andres Salomon August 20, 2026 https://www.debian.org/security/faq -...