CVE-2026-16661 Power System Integer Overflow

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can exploit this vulnerability,...

CVE-2026-16661

CVE-2026-16661 affects the IBM PowerVM Hypervisor service processor mailbox interface across multiple firmware versions (FW950.00–FW950.H2, FW1060.00–FW1060.80, FW1110.00–FW1110.30, and FW1120.00). The root cause is an integer overflow (CWE-190). An attacker with authenticated service-level acces...

CVE-2026-19508 RDK WebUI heap-based buffer overflow vulnerability

Heap-based buffer overflow in the multipart form-data parser in jstpost.c in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause memory corruption and denial of service, and potentially execute arbitrary code, via a crafted multipart/form-data request...

CVE-2026-19508

CVE-2026-19508 is a heap-based buffer overflow in the multipart form-data parser (jst_post.c) of the RDK-B WebUI (version rdkb-2025q4-kirkstone.04.10.26). The parser fails to validate malformed input before processing, causing the Duktape WebUI process to corrupt memory during parsing and subsequ...

EUVD-2026-62718

Heap-based buffer overflow in the multipart form-data parser in jstpost.c in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause memory corruption and denial of service, and potentially execute arbitrary code, via a crafted multipart/form-data request...

CVE-2026-75619

Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially crafted RTSP frame data containing oversized length values, resulting in out-of-bounds heap writes. Successful exploitation can crash the RT...

GHSA-VJHX-2CQW-3Q6Q Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS

Summary An unprivileged container can block all other containers from starting on the same host by placing a crafted /etc/ld.so.cache file in its filesystem. When Inspektor Gadget attaches any uprobe-based gadget, it parses this file in the container startup path. A malicious cache causes 53...

CVE-2026-16933 Power System Integer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 through OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker...

CVE-2026-16687

IBM Power Systems firmware (FW1120.00, FW1110.00–30, FW1060.00–80, FW950.00–H2) has a CWE-121 stack-based buffer overflow in the ASMI web interface; an unauthenticated adjacent attacker can send a malformed FSP request to execute arbitrary code, gaining full system control. IBM recommends upgradi...

CVE-2026-16687 Power System Buffer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code...

CVE-2026-16832

The vulnerability is a CWE-121: Stack-based Buffer Overflow in the FSP management network protocol. An authenticated HMC administrator can execute arbitrary code on the service processor, achieving full system control (CWE-3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, score 8.4 HIGH). Affected firmwar...

CVE-2026-16832 Power System Buffer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service...

CVE-2026-16832 Power System Buffer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service...

CVE-2026-17494 Power System Buffer Overflow

IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system,...

CVE-2026-17494

CVE-2026-17494 is a stack-based buffer overflow (CWE-121) in the interface between the BMC and host system of IBM Power Systems Firmware. Affected versions are FW1120.00 and FW1110.00 through FW1110.30 . An attacker with service access to the BMC can send a specially crafted command to achieve ar...

CVE-2026-17494 Power System Buffer Overflow

IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system,...

CVE-2026-18681

CVE-2026-18681 is a stack-based buffer overflow (CWE-121) in the FSP firmware update process of IBM Power Systems Server Firmware. An attacker with authenticated administrator-level access to the FSP over an adjacent network can execute arbitrary code, leading to full compromise of confidentialit...

CVE-2026-18681 This Power System Buffer Overflow

IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute...

CVE-2026-18681 This Power System Buffer Overflow

IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute...

EUVD-2026-62634

Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially crafted RTSP frame data containing oversized length values, resulting in out-of-bounds heap writes. Successful exploitation can crash the RT...