CVE-2026-16853 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16853

IBM i 7.3–7.6 (IBM i releases 7.3, 7.4, 7.5, 7.6) are affected by CVE-2026-16853 due to an out-of-bounds read in NetServer. The vulnerability could allow a remote attacker to obtain sensitive information. Affected components and root cause are described as an out-of-bounds read in NetServer, with...

EUVD-2026-58368

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow...

CVE-2026-16722 IBM i is Affected By An Unauthorized Privileges Vulnerability in SQL []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized privileges due to improper privilege management...

EUVD-2026-58367

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized privileges due to improper privilege management...

CVE-2026-16692

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow...

CVE-2026-16692

IBM i versions 7.6, 7.5, 7.4 and 7.3 are affected by CVE-2026-16692 in the Simple Mail Transfer Protocol. A remote authenticated attacker could cause a denial of service via a stack-based buffer overflow. Remediation provided by IBM includes platform-specific fixes: 7.6 – SJ11061 and SJ11131; 7.5...

EUVD-2026-58365

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow...

CVE-2026-56657

A flaw was found in Gitea. The SSH Key Parser component is vulnerable to a denial of service. A remote attacker could potentially exploit this by submitting a specially crafted SSH key, leading to the unavailability of the Gitea service. Mitigation Mitigation for this issue is either not availabl...

CVE-2026-17197

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity...

CVE-2026-18071

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-19746

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

EUVD-2026-58225

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

CVE-2026-19746

Calix GigaSpire 26.1.0 contains a vulnerability in the traceroute.cmd file where an unknown function can be manipulated to cause a denial of service. The issue can be triggered remotely, with public disclosure of the exploit. No remediation details are provided in the supplied documents. The vend...

CVE-2026-19746 Calix GigaSpire traceroute.cmd denial of service

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

EUVD-2026-58223

Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for display, and the resulting unhandled error prevented the affected...

CVE-2026-72630

Incorrect Authorization CWE-863 in Kibana Fleet can lead to privilege escalation via Privilege Abuse CAPEC-122. Fleet restricts some callers to managing integration policies for one specific integration. When an existing integration policy was updated, that restriction was evaluated against the...

CVE-2026-72639

Summary: CVE-2026-72639 affects Elasticsearch highlighting handling of a user-supplied count, where there is no upper bound on the count and the resulting allocation is not bounded by a circuit breaker. An authenticated user with read privileges on a single index can trigger a single, small query...

CVE-2026-72638 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

EUVD-2026-58274

An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state...