CVE-2026-82092 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...

CVE-2026-82095 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-82098 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-82099 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-82099

CVE-2026-82099 affects IBM DataStage on Cloud Pak for Data 5.4.0.0 , where a remote authenticated attacker can execute arbitrary code due to OS command injection (CWE-78) — improper neutralization of special elements in an OS command. The vulnerability is network-exploitable with low complexity a...

CVE-2026-82100 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-82107 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authentication...

CVE-2026-75731

creationtimestamp| type| source ---|---|--- 2026-09-10 21:19:07+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y4cqaxs2k...

CVE-2026-4130

creationtimestamp| type| source ---|---|--- 2026-09-10 20:54:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv6wr6md342c...

CVE-2026-89049

creationtimestamp| type| source ---|---|--- 2026-09-10 19:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6rhjxnwz22 2026-09-14 15:30:32+00:00| seen| https://bsky.app/profile/newsfacts.bsky.social/post/3mvigipepbk2a 2026-09-14 23:06:45+00:00| seen|...

CVE-2026-89043

creationtimestamp| type| source ---|---|--- 2026-09-10 19:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6qvntudj22 2026-09-10 20:09:01+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6u6yq6fm2r...

CVE-2026-88053

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATAINTTEMP component of a crafted .traineddata file and uses those values as loop bounds without validati...

UBUNTU-CVE-2026-88053

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATAINTTEMP component of a crafted .traineddata file and uses those values as loop bounds without validati...

CVE-2026-88051

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and sizeused from a .traineddata model without a cap or an invariant check. reservereserved allocates the backin...

CVE-2026-88049

creationtimestamp| type| source ---|---|--- 2026-09-10 18:05:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4snaaeueunf7v 2026-09-15 09:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvkd7nokwu24...

CVE-2026-88027

creationtimestamp| type| source ---|---|--- 2026-09-10 18:02:46+00:00| seen| https://bsky.app/profile/suriq.io/post/3mv6n5a5fd42j 2026-09-11 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-4 2026-09-14 14:00:21+00:00| seen|...

CVE-2026-85228

creationtimestamp| type| source ---|---|--- 2026-09-10 18:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6mzwzcxb2k 2026-09-11 05:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7uo3diay24...

We've got one word for it, and it's usually the wrong one

Welcome to this week's edition of the Threat Source newsletter. Ask anybody in this industry what the work does to the health of the people who do it and you get one word back: burnout. It's a fine word, in and of itself. It's easy to reach for, understandable to everyone… and it's the wrong one,...

CVE-2026-88050

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts negative code values from a crafted .traineddata recoder component. UnicharCompress::ComputeCodeRange in src/ccutil/unicharcompress.cpp can...

CVE-2026-88937

creationtimestamp| type| source ---|---|--- 2026-09-10 17:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/achufej3w2s5g 2026-09-11 05:30:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7tkel43c2y...