EUVD-2026-84185

An issue in CrossWire Xiphos = 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menupopup.c components...

CVE-2026-15915: Files or Directories Accessible to External Parties

IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images...

CVE-2026-17647: Inclusion of Functionality from Untrusted Control Sphere

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...

CVE-2026-18066: Server-Side Request Forgery (SSRF)

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information and trigger unauthorized actions due to server-side request forgery...

PT-2026-97077

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Insufficiently protected credentials may allow a local attacker to obtain sensitive information and perform unauthorized actions...

CVE-2026-17643: Insufficiently Protected Credentials

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials...

PT-2026-97087

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Insufficiently protected credentials may allow a local attacker to obtain sensitive information. Recommendations At the moment, there is no...

DEBIAN-CVE-2026-79079

An issue in CrossWire Xiphos = 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menupopup.c components...

CVE-2026-79079

An issue in CrossWire Xiphos = 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menupopup.c components...

openssh: OpenSSH: Tunnel forwarding restriction bypass

A flaw was found in OpenSSH's sshd component. The restrict keyword, designed to limit tunnel forwarding within the authorizedkeys file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to...

USN-8726-3: Linux kernel (IBM) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

kernel: memfd: deny writeable mappings when implying SEAL_WRITE

A flaw was found in the Linux kernel's memfd component. When the SEALEXEC flag is used to create a memory file descriptor, the SEALWRITE flag is implicitly applied to prevent writing to executable memory. However, this implicit write protection is applied after checks that should deny writable...

CVE-2026-78806: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component...

PT-2026-96047

Name of the Vulnerable Software and Affected Versions BioStar BIOS Update Utility version 1.9.7.3 Description A write-what-where condition exists in the IOCTL Handler component within the sub 110BC function of the BSMEM64 W10.sys file. This issue occurs when the PhysicalAddress and Size arguments...

CVE-2026-78806

An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component...

CVE-2026-79079

An issue in CrossWire Xiphos = 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menupopup.c components...

CVE-2026-84089

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-82893

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-84089 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-84089

IBM Guardium Data Protection 12.2 is vulnerable to improper privilege management (CWE-269), allowing a local attacker with low privileges to gain elevated privileges on the system. The vulnerability requires local access with low privilege level and low attack complexity, yielding a CVSS 3.1 scor...