CVE-2026-54742

In Lemmy versions 0.19.18 through 0.19.19 and 1.0.0-alpha.20, the CollectionAdd::Featured and CollectionRemove handlers in crates/apub/activities/src/community/collection_add.rs and collection_remove.rs dereference self.object as an ApubPost and update featured_community without verifying post.co...

EUVD-2026-62838

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

CVE-2026-16891 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16890

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain an integer overflow exploitable by a local attacker with low privileges (CVSS 3.6, LOW) to obtain sensitive information or cause denial of service. IBM's support page (https://www.ibm.com/support/pages/node/7283858) is the primary reference; no exploit...

CVE-2026-16890 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow...

EUVD-2026-62868

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call to...

EUVD-2026-62869

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-17097 Power System Improper Validation

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call causin...

CVE-2026-16875

A local attacker with low privileges on IBM AIX 7.2/7.3 or PowerVM VIOS 4.1 can inject shell metacharacters to execute arbitrary commands, scoring CVSS 7.8 (High). IBM's support page (https://www.ibm.com/support/pages/node/7283858) should be checked for available patches or workarounds.

EUVD-2026-62873

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to shell metacharacter injection...

EUVD-2026-62874

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles...

CVE-2026-16874 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles...

CVE-2026-16874

CVE-2026-16874 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The root cause is improper enforcement of RBAC authentication roles , which allows a local attacker with low privileges to escalate to root . The CVSS 3.1 score is 7.8 (HIGH) with full impact on confidentiality, integrity, and ava...

CVE-2026-16873 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write...

EUVD-2026-62875

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write...

CVE-2026-16873

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 suffer from an out-of-bounds write enabling local privilege escalation (CVSS 7.8 HIGH). No exploitation details or patch versions are provided in the documents; see IBM support reference for updates.

EUVD-2026-62755

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables...

CVE-2026-16869

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are affected by a local privilege escalation flaw caused by improperly scrubbed environment variables, allowing low-privilege local attackers to execute arbitrary code with HIGH confidentiality, integrity, and availability impact (CVSS 7.8). No exploitation de...

CVE-2026-74520

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit and IOMMUFD IOMMU File Descriptor components. This vulnerability is a Use-After-Free UAF, which means the system attempts to use memory that has already been released. Specifically, during device detachment or hardwa...

CVE-2026-74485

A flaw was found in the binfmtmisc component of the Linux kernel. An unprivileged local user, operating within a user namespace, could exploit this vulnerability. By registering a binfmtmisc string where the chosen delimiter character is also a flag character, the system's flag field parser can...