CVE-2026-65806

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:56+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 01:00:51+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 07:02:12+00:00| seen|...

CVE-2026-62898

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:55+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:52:13+00:00| seen| https://bsky.app/profile/blowdart.me/post/3mstimgx5zk2c 2026-08-11 20:52:18+00:00| seen|...

CVE-2026-66802

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:49+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:21:48+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:00:45+00:00| seen|...

CVE-2026-62827

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:47+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:43+00:00| seen|...

CVE-2026-65665

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:47+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:23+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:44+00:00| seen|...

CVE-2026-66807

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:43+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:40+00:00| seen|...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerability [CVE-2026-16860]

Summary IBM i is vulnerable to a remote code execution vulnerability due to an uncontrolled search path element CVE-2026-16860 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16860 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon [CVE-2026-17218]

Summary IBM i is vulnerable to remote code execution due to an out-of-bounds write CVE-2026-17218 in Line Printer Daemon LPD as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17218 DESCRIPTION: IBM i could allow a remote attacker to execute arbitrary code due...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerabilities [CVE-2026-17642, CVE-2026-17417]

Summary IBM i is vulnerable to remote code execution due to improper neutralization of shell metacharacters and special elements CVE-2026-17642, CVE-2026-17417 in Resource Monitoring and Control RMC as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17642...

Security Bulletin: IBM i is Affected By A Privilege Escalation Vulnerability [CVE-2026-18669]

Summary IBM i is vulnerable to privilege escalation CVE-2026-18669 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18669 DESCRIPTION: IBM i is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engi...

Security Bulletin: IBM i is Affected By A Remote Code Execution Vulnerability [CVE-2026-16975]

Summary IBM i is vulnerable to remote code execution due to a heap-based buffer overflow CVE-2026-16975 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16975 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute arbitrary code due to a...

CVE-2026-73226

CVE-2026-73226 affects electerm prior to version 3.15.186. An authenticated WebSocket client could invoke unintended internal functions via client-controlled func values in upgrade-func (src/app/server/dispatch-center.js) and handleFs (src/app/server/fs.js), exposing Upgrade and fsExport methods ...

CVE-2026-73226

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and...

CVE-2026-73226 Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and...

CVE-2026-18708 Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes

An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed within the query scope of other users, through a specially crafted stored value processed during an internal maintenance cycle. This could...

CVE-2026-18708

The CVE-2026-18708 issue affects MongoDB Server’s JavaScript scripting engine. An authenticated user with write privileges can cause code they control to run within the query scope of other users via a specially crafted stored value processed during an internal maintenance cycle. This can lead to...

Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes

An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed within the query scope of other users, through a specially crafted stored value processed during an internal maintenance cycle. This could...

CVE-2026-73223

CVE-2026-73223 affects electerm: an open-source terminal/SSH/SFTP client. The issue is a path traversal in the SFTP workflow: the filename used by editWithSystemEditor (in src/client/components/sftp/file-item.jsx) is interpolated into path.resolve without sanitization, allowing a malicious SFTP s...

EUVD-2026-56905

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...

CVE-2026-18692 Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...