29246 matches found
CVE-2026-16860: Uncontrolled Search Path Element
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...
CVE-2026-18246: Interpretation Conflict
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to an interpretation conflict in the multipart parser...
CVE-2026-18144: Improper Authorization
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...
CVE-2026-17094: Improper Limitation of a Pathname to a Restricted Directory
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and manipulate files due to a path traversal vulnerability...
PT-2026-71183
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper bounds checking may allow a remote authenticated attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
PT-2026-71155
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...
PT-2026-71268
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can gain elevated privileges due to improper validation of a client-supplied profile name. Recommendations At the moment, there is no information about a newer version...
PT-2026-71164
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can obtain sensitive information because the system does not properly validate user-supplied path input. This issue involves a path traversal flaw, where an attacker can...
PT-2026-71157
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A remote authenticated attacker can bypass security restrictions due to unsafe reflection. Reflection is a process that allows a program to inspect and modify its own structure and behavior at runtime...
CVE-2026-17109: Improper Input Validation
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection...
PT-2026-71162
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can modify SQL tables because the system fails to properly neutralize special elements used within an SQL command, leading to an SQL injection issue. Recommendations...
PT-2026-71182
IBM i 7.6, and 7.5 could allow a remote authenticated attacker to execute arbitrary commands with elevated privileges due to improper neutralization of special elements used in an OS command...
CVE-2026-19643: Out-of-bounds Read
An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862...
CVE-2026-19642: Out-of-bounds Write
An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version...
PT-2026-71277
Name of the Vulnerable Software and Affected Versions Amazon aws-sdk-cpp versions prior to 1.11.862 Description An out-of-bounds write issue exists in the Base64 decoder. This flaw allows a remote authenticated user to trigger a crash or heap memory corruption by providing specially crafted...
CVE-2026-18235: Improper Neutralization of Special Elements used in an OS Command
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...
CVE-2026-18106: Improper Limitation of a Pathname to a Restricted Directory
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied path input...
CVE-2026-18099: Improper Neutralization of Input During Web Page Generation
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input...