979602 matches found
CVE-2026-17095
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to unsafe reflection...
CVE-2026-17095
IBM i versions 7.3–7.6 are affected by CVE-2026-17095 due to unsafe reflection, allowing remote authenticated attackers to bypass security restrictions. The IBM Security Bulletin lists additional Navigator for i vulnerabilities in the same family. Affected products: IBM i 7.3, 7.4, 7.5, 7.6. Impa...
CVE-2026-18246
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to an interpretation conflict in the multipart parser...
CVE-2026-18246
CVE-2026-18246 affects IBM i 7.3–7.6, classified as CWE-436 (Interpretation Conflict) in the multipart parser of Navigator for i, allowing authenticated remote attackers to bypass security restrictions (CVSS 3.0 LOW). IBM has released PTFs SJ10887 (7.6), SJ10888 (7.5), SJ10890 (7.4), and SJ10891 ...
EUVD-2026-57351
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to an interpretation conflict in the multipart parser...
CVE-2026-18246 IBM i is Affected By security restrictions bypass in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to an interpretation conflict in the multipart parser...
CVE-2026-18106
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied path input...
CVE-2026-18106 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied path input...
CVE-2026-18106
IBM i (versions 7.3, 7.4, 7.5, 7.6) is affected by CVE-2026-18106: remote authenticated attacker could obtain sensitive information due to improper validation of user-supplied path input (path traversal). The incident is tied to Navigator for i in IBM i, with a base CVSS v3.1 score of 4.3 (Low co...
EUVD-2026-57350
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied path input...
CVE-2026-18144
CVE-2026-18144 affects IBM i 7.3–7.6 (Navigator for i). A remote authenticated attacker could bypass security restrictions due to improper authorization. IBM lists multiple IBM i Navigator/OS vulnerabilities with this and related CVEs; CVSS base score for this entry is 4.3 (low to medium). Remedi...
CVE-2026-18144 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...
CVE-2026-18144
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...
EUVD-2026-57349
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...
CVE-2026-18098 IBM i is Affected By XML injection flaw in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw...
CVE-2026-18098
CVE-2026-18098 affects IBM i releases 7.3, 7.4, 7.5, and 7.6. The vulnerability is described as an XML injection flaw in Navigator for i, leading to a remote authenticated attacker obtaining sensitive information and potentially compromising system integrity. IBM’s remediation involves platform f...
EUVD-2026-57348
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw...
CVE-2026-18098
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw...
CVE-2026-48554 Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution
Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to authenticated remote code execution via unfiltered NOTIFICATION-family macro substitution through the comdata parameter. When a notification command references $NOTIFICATIONCOMMENT$ or $NOTIFICATIONAUTHOR$ in a...
CVE-2026-48554
Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to authenticated remote code execution via unfiltered NOTIFICATION-family macro substitution through the comdata parameter. When a notification command references $NOTIFICATIONCOMMENT$ or $NOTIFICATIONAUTHOR$ in a...