CVE-2026-81669

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

EUVD-2026-83307

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

CVE-2026-81669 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

CVE-2026-81669 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

CVE-2026-81669

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input , achieving command execution with root privileges . The CVSS 3.1 score is 7....

create-fastapi (>=0.0.1, <=0.0.11), questionbankgenerator (1.0.0) potentially affected by CVE-2026-102925 via virtualenv (20.24.7)

virtualenv PYPI version 20.24.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - create-fastapi =0.0.1, =0.0.11 - questionbankgenerator 1.0.0 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

create-fastapi (>=0.0.1, <=0.0.11), questionbankgenerator (1.0.0) potentially affected by CVE-2026-102930 via virtualenv (20.24.7)

virtualenv PYPI version 20.24.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - create-fastapi =0.0.1, =0.0.11 - questionbankgenerator 1.0.0 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

create-fastapi (>=0.0.1, <=0.0.11), questionbankgenerator (1.0.0) potentially affected by CVE-2026-102937 via virtualenv (20.24.7)

virtualenv PYPI version 20.24.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - create-fastapi =0.0.1, =0.0.11 - questionbankgenerator 1.0.0 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...

SUSE CVE-2026-89665

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdrdecodesattr: iap-iaatime.tvnsec = tmp2 NSECPERUSEC; tmp2 is a u32 and NSECPERUSEC is 1000, so t...

CVE-2026-10030: Improper Authorization

IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks...

CVE-2026-81669: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

CVE-2026-61552: Improper Control of Generation of Code

Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/ permission can inject Icinga 2 DSL...

PT-2026-95645

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The create partition time function reads the time encoder value from the part config table and interpolates it into a dynamically executed SELECT statement without proper identifier quoting. A use...

PT-2026-95627

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated privileged CLI user can execute arbitrary shell commands with root privileges. This occurs due to a command injection flaw in the create csr wildcard CLI command via the...

rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...

create-fastapi (>=0.0.1, <=0.0.11), questionbankgenerator (1.0.0) potentially affected by CVE-2026-102938 via virtualenv (20.24.7)

virtualenv PYPI version 20.24.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - create-fastapi =0.0.1, =0.0.11 - questionbankgenerator 1.0.0 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...

CVE-2026-90277 md/md-llbitmap: prevent create failure bitmap UAF

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: prevent create failure bitmap UAF llbitmapcreate publishes mddev-bitmap before reading the bitmap superblock. This is needed because llbitmapreadsb can initialize a new bitmap and flush it through helpers that use...

PT-2026-94413

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/smc component where IPPROTO SMC sockets fail to release an internal TCP sock, referred to as clcsock, when socket creation fails after the proto-init hook has...

PT-2026-94783

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the RDMA/mlx5 component when the set user buf size function calculates the Queue Pair QP buffer size. The function performs a left-shift operation on...

PT-2026-94678

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the logitech-hidpp driver where the hidpp ff init function fails to properly clean up resources during an initialization failure. Specifically, if allocations for the...