uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 16.6.1 Refer to lunar.sh and CHANGELOG.md for more up to date version information License CC BY-NC-SA: https://creativecommons.org/licenses/by-nc-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code i...

Security Bulletin: Multiple vulnerabilities in rpm.rte affect AIX.

Summary Multiple Vulnerabilities in RPM could allow an attacker to cause denial of service CVE-2026-41992, CVE-2026-56288, CVE-2026-18739, crash or remote code execution CVE-2026-18743, CVE-2026-56289, CVE-2026-18839. RPM is used by AIX for package management. Vulnerability Details...

Security Bulletin: UPDATED bulletin for OpenSSL vulnerabilities impacting AIX. Updated On: Tue Oct 27 12:13:54 CDT 2026. Reason: Updated the iFix link, link was pointing to openssl_fix49.tar, instead of openssl_fix50.tar. And fixed typo in summary.

Summary Vulnerabilities in OpenSSL: CVE-2026-35189 - Memory exhaustion DoS, CVE-2026-54872 - ECDSA/SM2 timing side-channel, CVE-2026-77696 - SM2 timing side-channel,CVE-2026-84782 - Out-of-Bounds Read, CVE-2026-75805 - NULL pointer dereference DoS, CVE-2026-75806 - DTLS connection termination DoS...

Multiple vulnerabilities impact AIX due to OpenSSL

IBM SECURITY ADVISORY First Issued: Tue Oct 27 03:47:38 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/openssladvisory50.asc Security Bulletin: Multiple vulnerabilities impact AIX due to OpenSSL...

Security Bulletin: Vulnerability in BIND (CVE-2025-13878) affects AIX/ VIOS.

Summary A remote attacker can send or trigger processing of malformed BRID/HHIT DNS resource records, causing the named daemon to terminate unexpectedly. Vulnerability Details CVEID:CVE-2025-13878 DESCRIPTION: Malformed BRID/HHIT records can cause named to terminate unexpectedly. This issue affec...

Security Bulletin: AIX is vulnerable to a denial of service due to NTP and tmux.

Summary Multiple vulnerabilities in NTP and tmux could allow a remote attacker to cause Integer Overflow CVE-2026-63384, Out-of-bounds Read CVE-2026-63383, Memory Corruption CVE-2026-63381, CVE-2026-63387, CVE-2026-63388, HTTP Request Smuggling / Header Injection CVE-2026-63379, CVE-2026-63382,...

Security Bulletin: Vulnerabilities in libxml2 (CVE-2026-86140, CVE-2026-86141, CVE-2026-86143, CVE-2026-86144) affect AIX.

Summary Vulnerabilities in libxml2 could cause stack-based buffer overflow CVE-2026-86140, A NULL pointer dereference CVE-2026-86141, An integer overflow CVE-2026-86143, denial-of-service CVE-2026-86144. AIX uses libxml2 as part of its XML parsing functions. Vulnerability Details...

Security Bulletin: Multiple vulnerabilities in Python affect AIX

Summary Vulnerabilities in Python: SSL/TLS Security Vulnerabilities CVE-2026-19553, CVE-2026-19445, Archive Extraction / Tarfile Vulnerabilities CVE-2026-19672, CVE-2026-82049, CVE-2026-87910, Authentication / Credential Exposure CVE-2026-15806, Memory Management Vulnerabilities CVE-2026-15310,...

AIX is vulnerable to a denial of service due to NTP and tmux.

IBM SECURITY ADVISORY First Issued: Wed Oct 21 07:14:39 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/ntptmuxadvisory15.asc Security Bulletin: AIX is vulnerable to a denial of service due to NTP and tmux...

Vulnerabilities in libxml2 (CVE-2026-86140 CVE-2026-86141 CVE-2026-86143 CVE-2026-86144) affect AIX

IBM SECURITY ADVISORY First Issued: Wed Oct 21 05:56:41 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/libxml2advisory12.asc Security Bulletin: Vulnerabilities in libxml2 CVE-2026-86140, CVE-2026-86141, CVE-2026-86143,...

Multiple vulnerabilities in Python affect AIX

IBM SECURITY ADVISORY First Issued: Wed Oct 21 00:15:44 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory22.asc Security Bulletin: Multiple vulnerabilities in Python affect AIX...

CVE-2026-77926

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/getanswer or upload documents with maliciou...

CVE-2026-77926 Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/getanswer or upload documents with maliciou...

CVE-2026-77926

Aix-DB 1.2.4 is vulnerable to a remote code execution (RCE) flaw within the ChatBI common agent's ungated deepagents execute tool . This vulnerability allows authenticated non-admin users to execute arbitrary operating system commands on the host. Attackers can trigger this by sending crafted cha...

CVE-2026-77926 Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/getanswer or upload documents with maliciou...

EUVD-2026-104686

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/getanswer or upload documents with maliciou...

CVE-2026-77926 Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/getanswer or upload documents with maliciou...

PT-2026-117948

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/get answer or upload documents with malicio...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition,Version 8 used by AIX. AIX has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...