Security Bulletin: IBM i is Affected By Use of Less Trusted Source and Resource Allocation Without Throttling Vulnerabilities in OpenSSH [CVE-2026-59999, CVE-2026-60001]

Summary IBM i is vulnerable to using a less trusted source due to DisableForwarding taking precendence over PermitTunnel CVE-2026-59999 and not always honoring the minimum authentication delay CVE-2026-60001 in OpenSSH as described in the vulnerability details section. Vulnerability Details...

EUVD-2024-20630

Malicious code in bioql PyPI...

CVE-2024-23105

A Use Of Less Trusted Source CWE-348 vulnerability in Fortinet FortiPortal version 7.0.0 through 7.0.6 and version 7.2.0 through 7.2.1 allows an unauthenticated attack to bypass IP protection through crafted HTTP or HTTPS packets...

CVE-2024-27773

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE...

CVE-2024-27773 Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted Source

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE...

CVE-2024-27773

CVE-2024-27773 affects Unitronics Unistream Unilogic (Unitronics PLC software). Affects Unilogic versions prior to 1.35.227. Root cause per sources: use of less trusted sources, which may allow remote code execution (RCE). Impact is high (network access, local privileges, unauthenticated/low-priv...

CVE-2024-27773 Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted Source

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE...

GitHub Security Lab: [Python] CWE-348: Client supplied ip used in security check

This bug was reported directly to GitHub Security Lab...

GitHub Security Lab: [Java] CWE-348: Use of less trusted source

This bug was reported directly to GitHub Security Lab...