PT-2026-81786

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper privilege management in Regional Capabilities allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to induce the...

The vulnerability in the Firefox web browser relates to the insecure management of privileges, allowing a perpetrator to trigger a service failure.

The vulnerability in the Firefox web browser is related to insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Netmonitor component in the Firefox web browser and Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the Netmonitor component in the Firefox web browser and Thunderbird email client is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Netmonitor component in the Firefox web browser and Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the Netmonitor component in the Firefox web browser and Thunderbird email client is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2026-59799

Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable flow. This issue affects Apache CloudStack: from 4.18.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to...

CVE-2026-59799 Apache CloudStack: Missing Privilege Check in Two-Factor Authentication Disable Flow

Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable flow. This issue affects Apache CloudStack: from 4.18.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to...

EUVD-2026-63841

Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable flow. This issue affects Apache CloudStack: from 4.18.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to...

CVE-2026-59799

Apache CloudStack is affected by an improper privilege management flaw in its Two-Factor Authentication plugin , specifically a missing privilege check in the 2FA disable flow that allows it to be bypassed. The vulnerability affects versions 4.18.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0...

EUVD-2026-63717

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management...

EUVD-2026-63633

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management...

EUVD-2026-63674

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...

PT-2026-79322

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.18.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Improper Privilege Management in the Two-factor authentication plugin allows for the bypass of the two-factor authentication...

The vulnerability of the Apache HTTP Server web server, related to insecure management of privileges, allows attackers to elevate their own privileges.

The vulnerability of the Apache HTTP Server web server is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2026-17145

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management...

CVE-2026-16997

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management...

CVE-2026-16937

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-17145

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 are vulnerable to remote arbitrary code execution due to improper privilege management. CVSS 9.8 critical; no patch version or exploit details provided. IBM support page is the sole reference; monitor for updates. Exploitation status is not provided.

CVE-2026-17145 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management...

CVE-2026-16997

CVE-2026-16997 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A local attacker with no privileges but requiring user interaction can execute arbitrary commands due to improper privilege management , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.8 H...

CVE-2026-16937

CVE-2026-16937 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A local attacker with low privileges can exploit improper privilege management to gain elevated privileges, resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). The attack vector is l...