CVE-2026-9825 IBM Cyber Fraud Reachable Assertion

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks...

CVE-2026-9825 IBM Cyber Fraud Reachable Assertion

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks...

CVE-2026-81212

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to an improper authorization flaw (CWE-285) that allows an unauthenticated user to perform an arbitrary write into the shared Redis instance. This vulnerability allows an anonymous caller to write data under any tenant's key, effectively c...

CVE-2026-81212 DataStage on Cloud Pak for Data Improper Authorization

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller poison any tenant's cached flow parameters...

CVE-2026-81212 DataStage on Cloud Pak for Data Improper Authorization

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller poison any tenant's cached flow parameters...

pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions

A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the pcre2dfamatch function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction...

pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions

A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the pcre2dfamatch function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction...

CVE-2026-82891 IBM Guardium Data Protection is affected by a security vulnerability

IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key...

CVE-2026-82891 IBM Guardium Data Protection is affected by a security vulnerability

IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key...

CVE-2026-82891

IBM Guardium Data Protection versions 12.1 and 12.2 are affected by a security vulnerability (CVE-2026-82891 ) caused by the use of a hard-coded cryptographic key (CWE-321). This flaw could allow a remote attacker to obtain sensitive information . To remediate this issue, IBM encourages customers...

CVE-2026-91668

A vulnerability exists in the Dictionary Repository component of Oracle Data Integrator within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via SQL can easily exploit this flaw to compromise the product, potentially ...

CVE-2026-91662

A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . This difficult-to-exploit flaw allows a low-privileged attacker with local infrastructure access to compromise Oracle Essbase, potentially leading to unauthorized access to critical data or the ability...

CVE-2026-91642

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized read, update, insert, or delete access to a subset of a...

CVE-2026-91644

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized access to critical data or full access to all accessible data, as well ...

CVE-2026-91628

A vulnerability exists in the BRM Server component of the Oracle Communications Billing and Revenue Management product, specifically affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . A low-privileged attacker with access to the infrastructure can exploit this vulnerability t...

CVE-2026-91629

The Oracle Communications Billing and Revenue Management product (component: Platform ) is affected by a difficult-to-exploit vulnerability in versions 15.0.0.0.0 , 15.0.1.0.0 , 15.1.0.0.0 , and 15.2.0.0.0 . A low-privileged attacker with infrastructure logon access can compromise the system, pot...

CVE-2026-91625

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is vulnerable in version 6.2.4 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitati...

CVE-2026-91624

The Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain), specifically the Product Quality Management component in version 6.2.4 , contains a critical vulnerability. An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise ...

CVE-2026-91623

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (specifically version 6.2.4 ). This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful e...

CVE-2026-91615

A vulnerability exists in the Java VM component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with network access via SOCKS5 can exploit this difficulty-to-exploit flaw to compromise the Java VM. Successful exploitation may l...