29396 matches found
CVE-2026-80379
IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a flaw that allows a remote authenticated attacker to execute arbitrary commands . The root cause is the improper neutralization of special elements used in an OS command. This vulnerability results in high impact across confidentiality...
CVE-2026-87898
OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges...
CVE-2026-87900
Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts...
CVE-2026-68492
An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful API" extension from 2.4.2 before 2.4.7...
CVE-2026-68492
An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful API" extension from 2.4.2 before 2.4.7...
CVE-2026-68492
An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful API" extension from 2.4.2 before 2.4.7...
CVE-2026-87900
An argument injection vulnerability exists in the WP Toolkit for cPanel version 6.11.2-10794 and earlier. This flaw allows a remote authenticated user to perform database modifications in other accounts, which can include reading arbitrary files and executing arbitrary code across customer accoun...
CVE-2026-87898
OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges...
CVE-2026-87900
Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts...
CVE-2026-87900
Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts...
CVE-2026-87898
A critical OS command injection vulnerability in Plesk allows remote authenticated users to execute arbitrary code with root privileges . The vulnerability has a CVSS 4.0 base score of 9.4 . While technical details regarding the specific vulnerable component or root cause are not explicitly provi...
CVE-2026-68492
The Plesk control panel is affected by an untrusted search path vulnerability in versions 18.0.34 to 18.0.80.7 , 18.0.81 to 18.0.81.0 , and specifically within the Plesk RESTful API extension from version 2.4.2 to 2.4.6 . This flaw allows remote authenticated users to achieve arbitrary code execu...
EUVD-2026-85619
Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts...
EUVD-2026-85618
OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges...
EUVD-2026-85622
Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges...
CVE-2026-18180
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection...
CVE-2026-18180 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection...
CVE-2026-18180
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote authenticated attacker to obtain sensitive information . This security flaw is caused by an SQL injection vulnerability. No specific affected versions, remediation steps, or explo...
CVE-2026-18180 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection...