EUVD-2026-85673

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-80425 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-80425 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-80425

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to arbitrary command execution because of the improper neutralization of special elements used in an OS command. This flaw could be exploited by a remote authenticated attacker to execute commands on the target system. No specific ...

CVE-2026-80412 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values during OSH script generation...

CVE-2026-80412

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to remote code execution due to improper escaping of connector property values during OSH script generation. A remote authenticated attacker could exploit this flaw to execute arbitrary code. No specific exploit details or remediation step...

CVE-2026-80379 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-80379 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

EUVD-2026-85671

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-80379

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a flaw that allows a remote authenticated attacker to execute arbitrary commands . The root cause is the improper neutralization of special elements used in an OS command. This vulnerability results in high impact across confidentiality...

CVE-2026-66072

A flaw was found in RabbitMQ. An authenticated stream client with read access to any stream can exploit a vulnerability in the getchunkselector/1 function. This function processes a client-supplied chunkselector property without proper validation, leading to an atom table exhaustion. Successful...

CVE-2026-82369

Brocade SANnav suffers from a vulnerability where insufficient input sanitization of shell metacharacters in the CLI scripting component allows authenticated users to break out of restricted execution contexts on managed switches. An attacker with command execution permissions can exploit this fl...

CVE-2026-67235 RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size

RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize a uint64 was stored without validation against maxmessagesize. The size check ran only when assembly completed. By declaring bodysize = 2^63-1 and then streaming...

CVE-2026-67235

The messaging and streaming broker RabbitMQ is vulnerable to a memory exhaustion flaw in versions prior to 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15 . The AMQP 0-9-1 protocol's body assembly process fails to validate the BodySize content-header against max_message_size until assembly is complete....

CVE-2026-87899

Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges...

CVE-2026-87898

OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges...

CVE-2026-87900

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts...

CVE-2026-67238

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, rabbitpidcodec:decomposefrombinary/1 parses a caller-supplied ETF-encoded binary and calls binarytoatomNode, utf8 on the node-name field. It is reached from rabbitvolatilequeue:pidfromname/2, which is invoked for any...

CVE-2026-68492

An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful API" extension from 2.4.2 before 2.4.7...

CVE-2026-66070

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, matchorigin/1 returned the bare reflected Origin and allowed credentials even when the wildcard "" was configured, so the response echoed the attacker's origin together with...