CVE_2022_3141

CVE-2022-3141: SQL Injection in ACS EDU 3rd Generation This repository contains a detailed security analysis and report for the vulnerability identified as CVE-2022-3141, affecting the ACS EDU 3rd Generation smart-card system. Vulnerability Overview CVE ID : CVE-2022-3141 Product : ACS EDU 3rd...

CVE-2020-3580

CVE-2020-3580 Cisco ASA / FTD reflected XSS in the WebVPN SAML SP ACS endpoint /+CSCOE+/saml/sp/acs. Patched in cisco-sa-asaftd-xss-multiple-FCB3vPZe. This repo contains: xss.html — a human-verifiable PoC for authorized targets. src/ — a discovery + scope-aware validation pipeline. docs/ —...

CVE-2026-14275 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command...

CVE-2026-14276 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...

CVE-2026-14277 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file...

CVE-2026-14277

IBM i Access Client Solutions (ACS) , versions 1.1.2.0 through 1.1.9.15 , is affected by an OS command injection vulnerability (CWE-78) caused by improper validation of user-supplied input in a session file . An authenticated user can exploit this to execute arbitrary commands with normal user pr...

CVE-2026-89448

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit component. When tboot Trusted Boot is enabled, the system may fail to correctly request Access Control Services ACS. This misconfiguration could potentially lead to a bypass of intended Access Control Services, which...

Linux Distros Unpatched Vulnerability : CVE-2026-89448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible...

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

SAML Tenant Binding Enables Cross-Tenant Account Takeover Summary Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token. A malicious tenant with its own SAML configuration and a self-controlled IdP could...

AZL-100874 CVE-2026-89448 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

DEBIAN-CVE-2026-89448

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

CVE-2026-89448

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

UBUNTU-CVE-2026-89448

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

CVE-2026-89448

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

CVE-2026-89448 iommu/vt-d: Force requesting ACS when tboot is enabled

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

CVE-2026-89448

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

CVE-2026-89448 iommu/vt-d: Force requesting ACS when tboot is enabled

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

EUVD-2026-76354

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible misconfiguration with ACS disabled e.g. due to user opts while iommu...

CVE-2026-89448

CVE-2026-89448 is a CRITICAL (CVSS 9.3) vulnerability in the Linux kernel's Intel VT-d IOMMU subsystem. The function detect_intel_iommu() fails to check for tboot when determining whether to request ACS (Access Control Services) . When tboot is enabled, tboot_force_iommu() forces the IOMMU on, bu...

Security Bulletin: IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

Summary IBM i Access Client Solutions ACS is vulnerable to multiple vulnerabilities CVE-2026-14275, CVE-2026-14276, CVE-2026-14277 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-14276 DESCRIPTION: IBM i Access Client Solutions could allow an authenticated...