PT-2026-72106

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A path traversal issue exists that could allow a remote authenticated attacker to delete arbitrary files. Path traversal is a flaw that allows an attacker to access or manipulate files...

PT-2026-72101

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments...

PT-2026-72094

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A remote authenticated attacker can bypass security restrictions because server-side input validation can be disabled through a request parameter. Recommendations Update IBM Db2 Mirror...

PT-2026-72091

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...

PT-2026-72105

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Remote authenticated attackers can bypass security restrictions due to improper neutralization of special elements used in an SQL command, which may lead to SQL injection. SQL injection...

PT-2026-72099

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A remote authenticated attacker can cause a denial of service through command injection, which occurs when an application passes unsafe user-supplied data to a system shell...

PT-2026-72102

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Remote attackers can execute arbitrary code because the software allows external control of file names or paths. Recommendations At the moment, there is no information about a newer...

PT-2026-72100

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A path traversal issue exists that could allow a remote attacker to write files to arbitrary locations. Path traversal is a flaw that allows an attacker to access or manipulate files an...

PT-2026-72098

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A remote attacker can cause a denial of service due to uncontrolled recursion, which occurs when a function calls itself repeatedly without a proper termination condition, leading to...

PT-2026-72095

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Improper limitation of a pathname to a restricted directory allows a remote attacker to write arbitrary files. Recommendations Update IBM Db2 Mirror for i version 7.4 to a fixed release...

PT-2026-72107

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A remote authenticated attacker can obtain sensitive information because the software does not properly limit pathnames to restricted directories. Recommendations At the moment, there i...

PT-2026-72097

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Improper authentication enforcement may allow a remote authenticated attacker to obtain sensitive information. Recommendations At the moment, there is no information about a newer versi...

PT-2026-72103

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Improper neutralization of special elements in a command allows a remote attacker to execute arbitrary CL Control Language commands. CL is a command-line interface used to manage system...

PT-2026-72092

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

PT-2026-72090

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Remote attackers can obtain sensitive information because the system configuration is subject to external control. Recommendations At the moment, there is no information about a newer...

CVE-2026-16961

IBM i versions 7.4, 7.5, and 7.6 (feature 5770-SS1) are vulnerable to CWE-89 SQL injection in Db2 Mirror, allowing remote attackers to view, add, modify, or delete back-end database data. IBM has issued PTFs SJ10902 (7.6), SJ10908 (7.5), and SJ10910 (7.4) as remediation; no workarounds are provid...

CVE-2026-16961 IBM i is Affected By SQL Injection Vulnerability in Db2 Mirror []

IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-58508

Two SSRF vulnerabilities in Gitea migration/mirror DNS rebinding + missing re-validation...

EUVD-2026-58174

Two SSRF vulnerabilities in Gitea migration/mirror DNS rebinding + missing re-validation...

CVE-2026-58508

The Git repository management system Gitea contains two Server-Side Request Forgery (SSRF) vulnerabilities within its migration and mirror functions. The root causes are identified as DNS rebinding and a lack of re-validation , which may allow a remote attacker to induce the server to make unauth...