Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in SQL

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17111, CVE-2026-17110, CVE-2026-17109, CVE-2026-17420, CVE-2026-17222, CVE-2026-17419, CVE-2026-17418 in SQL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17111 DESCRIPTION: IBM i is...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17083, CVE-2026-16907, CVE-2026-17248, CVE-2026-17271, CVE-2026-17082 in Debug Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17083 DESCRIPTION: IBM i could allow a remote attacker to...

GHSA-M93F-WJ8C-RP8P Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.WebSockets. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An unchecked input for loop condition in...

Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.WebSockets. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An unchecked input for loop condition in...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerabilities [CVE-2026-17642, CVE-2026-17417]

Summary IBM i is vulnerable to remote code execution due to improper neutralization of shell metacharacters and special elements CVE-2026-17642, CVE-2026-17417 in Resource Monitoring and Control RMC as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17642...

Security Bulletin: IBM i is Affected By SQL Injection Vulnerability in Db2 Mirror [CVE-2026-16961]

Summary IBM i is vulnerable to Structure Query Language SQL injection as a result of processing specially crafted statements CVE-2026-16961 in Db2 Mirror as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16961 DESCRIPTION: IBM i is vulnerable to SQL injection...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Domain Name System

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16906, CVE-2026-16856 in BIND Domain Name System DNS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16906 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute arbitrary...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Navigator for i

Summary IBM i is vulnerable to multiple vulnerabillities CVE-2026-16694, CVE-2026-17101, CVE-2026-17099, CVE-2026-16904, CVE-2026-17095, CVE-2026-17094, CVE-2026-17268, CVE-2026-17266, CVE-2026-17276, CVE-2026-18099, CVE-2026-18098, CVE-2026-18235, CVE-2026-18713, CVE-2026-18683, CVE-2026-18250,...

CVE-2026-18698 Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations,...

CVE-2026-18698 Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations,...

Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations,...

CVE-2026-68184

A flaw was found in the Linux kernel's CD-ROM cdrom driver. When handling the CDROMVOLCTRL command, the mmcioctlcdromvolume function can perform an incorrect calculation of buffer length after a pointer adjustment. This leads to a stack out-of-bounds read, where 8 bytes of data beyond the intende...

Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring...

CVE-2026-18702 Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring...

CVE-2026-18702 Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring...

CVE-2026-18696 Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an...

CVE-2026-18696

Technical details are not publicly available in the provided documents. Monitor for updates.

EUVD-2026-56914

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an...

Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.HttpListener. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Inconsistent interpretation of http...

GHSA-R6MH-95JW-G7QG Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.HttpListener. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Inconsistent interpretation of http...