Vulnerability in core server (CVE-2026-16238)

PostgreSQL type confusion in pgrestoreattributestats executes arbitrary code Type confusion in PostgreSQL pgrestoreattributestats allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major versi...

Vulnerability in client (CVE-2026-18408)

PostgreSQL psql \unrestrict lets superuser of pgdump origin server execute arbitrary code in psql client Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account...

CVE-2026-26199 affecting package hdf5 for versions less than 1.14.6-4

CVE-2026-26199 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...

CVE-2026-26197 affecting package hdf5 for versions less than 1.14.6-4

CVE-2026-26197 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...

Important: Red Hat Security Advisory: Red Hat Lightspeed (formerly Insights) for Runtimes security update

An update is now available for Red Hat Lightspeed formerly Insights for Runtimes on RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-19004

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in...

CVE-2026-19001

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to...

CVE-2026-16695

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-13094

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...

EUVD-2026-57627

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...

CVE-2026-19158

A flaw was found in Google Chrome. A use-after-free vulnerability in the Views component could allow a remote attacker to exploit heap corruption. This can occur if a user is convinced to engage in specific user interface UI gestures while visiting a specially crafted HTML page, potentially leadi...

EUVD-2026-57614

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...

CVE-2026-13094 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...

CVE-2026-13094

IBM i Access Client Solutions (ACS) is affected by CVE-2026-13094. Vulnerable versions are ACS 1.1.2.0 through 1.1.9.13 on Windows when installed for all users, due to a publicly writable configuration file that enables arbitrary code execution. The IBM advisory lists a base CVSS v3.1 score of 7....

CVE-2026-16695

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-16695 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-16695

IBM i Access Client Solutions (ACS) versions 1.1.2.0 through 1.1.9.13 are affected by CVE-2026-16695, a local code execution vulnerability caused by improper neutralization of special elements used in an OS command. The issue affects the ACS component of IBM i Access Client Solutions and is categ...

EUVD-2026-57609

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-16695 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

MongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output Parameters

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in...