CVE-2026-75875

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal...

CVE-2026-107726

Hazelcast is vulnerable to an arbitrary memory access flaw in versions prior to 5.4.5, 5.5.10, 5.6.1, and 5.7.0 . The root cause is improper validation of data supplied by a malicious client capable of connecting to a cluster. An attacker can perform arbitrary reads from a cluster member's Java h...

CVE-2026-107725

Hazelcast , a unified real-time data platform, contains a vulnerability in the IMap Predicates API due to missing authorization checks. This flaw allows a malicious client with limited privileges to achieve arbitrary code execution on a Hazelcast cluster member. The issue affects versions prior t...

EUVD-2026-95313

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predicates API allow a malicious client with limited privileges to execute arbitrary code on a Hazelcast cluster member...

CVE-2026-107725

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predicates API allow a malicious client with limited privileges to execute arbitrary code on a Hazelcast cluster member...

CVE-2026-107725 Hazelcast: Authorization bypass in IMap Predicates API

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predicates API allow a malicious client with limited privileges to execute arbitrary code on a Hazelcast cluster member...

CVE-2026-107725 Hazelcast: Authorization bypass in IMap Predicates API

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predicates API allow a malicious client with limited privileges to execute arbitrary code on a Hazelcast cluster member...

CVE-2026-107725 Hazelcast: Authorization bypass in IMap Predicates API

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predicates API allow a malicious client with limited privileges to execute arbitrary code on a Hazelcast cluster member...

CVE-2026-75875 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal...

CVE-2026-75875 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal...

CVE-2026-82895

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a buffer overflow (CWE-120) within the Sniffer component . This flaw could allow a remote attacker to execute arbitrary code. The vulnerability is rated with a CVSS 3.1 score of 8.1 . To remediate this issue, IBM strongl...

CVE-2026-84035 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-84058 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or...

CVE-2026-84058

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a buffer overrun (CWE-119) within the TDS (Microsoft SQL Server) PRELOGIN packet decoder of the Sniffer component . A remote attacker capable of sending a specially crafted TDS PRELOGIN packet to a network monitored by a...

CVE-2026-84198

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a buffer overflow (CWE-120) within the Sniffer component . This flaw could allow a remote attacker to execute arbitrary code. The vulnerability is rated with a CVSS base score of 8.1 (High). To mitigate this risk, IBM st...

CVE-2026-84875

The IBM Guardium Data Protection software, specifically versions 12.0, 12.1, and 12.2 , is vulnerable to a buffer overflow (CWE-119) within the Sniffer component . This flaw could allow a remote attacker to execute arbitrary code on the system. To mitigate this risk, IBM strongly recommends apply...

CVE-2026-16916

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary code due to a protection mechanism failure...

CVE-2026-101024

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...

Arbitrary Code Execution (ACE)

hydraoptunasweeper is vulnerable to arbitrary code execution. The vulnerability is due to improper validation of configuration-controlled dotted paths in hydra-optuna-sweeper, which allows an attacker to execute arbitrary importable Python code with the application's privileges by manipulating...

CVE-2026-101024 Satel Netco Design Relative path traversal

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...