CVE-2026-17417 IBM i is Affected By Remote Code Execution Vulnerabilities [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters...

EUVD-2026-57414

ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user including one holding only low-privilege, read-only permissions to execute arbitrary operating system commands on the host. Successful exploitation results in code execution in the conte...

CVE-2026-73330 CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action

CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the testemail settings action, which are evaluated when an SMTP rejection reflects the recipient address...

CVE-2026-73330

CVE-2026-73330 affects CamaleonCMS 2.9.1 and stems from a server‑side template injection in the test_email action. An authenticated administrator can submit an email parameter containing ERB expressions; when an SMTP rejection is reflected back in the exception message rendered as an inline ERB t...

CVE-2026-18235

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...

CVE-2026-17110

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management...

CVE-2026-16904

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...

CVE-2026-16956

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by CVE-2026-16956 due to improper neutralization of special elements used in an OS command, enabling remote command execution. The vulnerability impacts IBM Db2 Mirror for i running these versions and is rated CVSS v3.1 base score 9.8 (...

CVE-2026-16956 IBM Db2 Mirror for i is vulnerable to OS command injection []

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

EUVD-2026-57380

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

EUVD-2026-57375

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management...

CVE-2026-18235

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...

CVE-2026-18235 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...

EUVD-2026-57363

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...

CVE-2026-16904

CVE-2026-16904 (IBM i) affects IBM i 7.3–7.6. A remote authenticated attacker could execute arbitrary commands due to improper privilege management during monitor owner reassignment. CVSSv3.1 base score 8.1 (High): vectors include AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N; privileges required: LOW; net...

EUVD-2026-57358

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...

CVE-2026-16904

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...

CVE-2026-16904 IBM i is Affected By improper privilege management in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...

EUVD-2026-57320

Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository giturl handling passes an attacker-controlled --upload-pack option to CmdGitClient.GetLastRemoteCommitHash through POST /api/project/id/repositories and scheduled commit-hash polling, allowing...

PT-2026-71187

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper privilege management may allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information. Recommendations At the moment, there is no information about a...