CVE-2026-93744 IBM i Improper Authentication

IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability ...

CVE-2026-93744

The IBM Navigator for i application on IBM i versions 7.3, 7.4, 7.5, and 7.6 (5770-SS1 Option 3) is vulnerable to an improper authentication flaw (CWE-287 ). An unauthenticated remote attacker can bypass security restrictions by sending a specially crafted HTTP request to any URL within the Navig...

CVE-2026-93744 IBM i Improper Authentication

IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability ...

Malicious code in @securihackbot/depconf-stage-1792484738 (npm)

Source: amazon-inspector d8d8706d2a75c053047537a4f57f754a572a1ca4cec4cde80d00e453878013e1 The package's npm postinstall hook automatically executes on install and transmits installer-identifying data to a hardcoded remote endpoint. It collects os.hostname, the local username, platform/arch, Node...

CVE-2026-91659

A vulnerability exists in the Build component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation can lead to unauthorized access to critical data or complete access to all acc...

CVE-2026-91661

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to unauthorized access to critical data or complete access to all accessible da...

CVE-2026-91660

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to cause a partial denial of service (partial DOS) . While the root cause is not explicitly detailed, the vulnerability is character...

CVE-2026-91658

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low privileged attacker with network access via HTTP can easily exploit this flaw to compromise Oracle Essbase , potentially leading to a full takeover of the system. Due to a scope change , attacks may sign...

CVE-2026-91657

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially leading to unauthorized read access to a subset of accessible data. No specific exploit code o...

CVE-2026-91656

A vulnerability exists in the Federated Partitions component of Oracle Essbase version 21.8.3.0.0 . A low privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can lead to unauthorized access to critical data , unauthorized update...

CVE-2026-91655

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system, potentially resulting in unauthorized access to critical or complete accessible data. Impact...

CVE-2026-91654

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system. Impact includes unauthorized read access to a subset of data, unauthorized update, insert, or delete acce...

CVE-2026-91653

A vulnerability exists in Oracle Essbase (specifically the Essbase Web Platform component) in version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized access to critical data or the ability to perf...

CVE-2026-91652

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized read access to a subset of accessible data withi...

CVE-2026-91651

A vulnerability exists in the Essbase Web Platform component of Oracle Essbase version 21.8.3.0.0 . This difficult to exploit vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system, potentially resulting in a takeover of Oracle Essbase . Due to a scop...

CVE-2026-91650

A vulnerability exists in the Java Based Agent component of Oracle Essbase (affected version 21.8.3.0.0 ). This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized read access to a...

CVE-2026-91645

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this issue to compromise the system, potentially leading to unauthorized read access to a subset of accessible data. While the specific root...

CVE-2026-91642

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized read, update, insert, or delete access to a subset of a...

CVE-2026-91643

A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized read access to a subset of accessible data. The issue is rated ...

CVE-2026-91644

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized access to critical data or full access to all accessible data, as well ...