CVE-2026-16972

IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 are affected by an improper authentication flaw that could allow a remote, unauthenticated attacker to obtain sensitive information over the network. The NVD scores this 7.5 (HIGH) , while IBM's CNA assigns 6.5 (MEDIUM) with lower confidence and availa...

CVE-2026-16972 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication...

Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication

Summary The init guard middleware in Qinglong only checks /api/user/init paths but not /open/user/init, which is whitelisted from JWT authentication and rewritten to /api/user/init after the guard has already passed, allowing unauthenticated admin credential reset on initialized instances. Affect...

PT-2026-79165

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Improper authentication in the system could allow a remote attacker to obtain sensitive information. Recommendations At the moment, there is no information about a newer...

PT-2026-79226

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication...

PT-2026-79172

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Improper authentication in the system could allow a remote attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version...

CVE-2026-76338 Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has access to a trusted distributed search private key could forge an administrative session token, access all relevant data, affect system integrity, and disrupt service availability. The...

CVE-2026-76338

Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 are vulnerable because the distributed search token REST endpoint does not require a signed request, falling back to shared local key material. An attacker with a trusted distributed search private key can forge an admin session ...

CVE-2026-16857

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication...

EUVD-2026-62749

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication...

CVE-2026-16857 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication...

CVE-2026-16857

IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 are vulnerable to remote unauthenticated attacks that allow manipulation of network traffic and DNS configuration. CVSS 8.2 (HIGH) reflects no privileges or user interaction required; IBM support page https://www.ibm.com/support/pages/node/7283858 is the prim...

CVE-2026-20317

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20317

CVE-2026-20317 is an improper authentication vulnerability (CWE-287) in Cisco Secure Workload , affecting both SaaS and on-premises deployments. It spans missing authentication, authentication bypass, and reliance on untrusted inputs, and carries a CVSS 3.1 score of 10.0 (Critical) with a network...

EUVD-2026-62569

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-16686

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...

EUVD-2026-62517

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...

CVE-2026-16686 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...

CVE-2026-16686 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...

CVE-2026-16656

A remote, unauthenticated attacker can gain full root privileges on IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 due to improper authentication, rated CVSS 9.8 Critical (C:H/I:H/A:H). IBM has published a support advisory; check the vendor reference for applicable fixes. No exploit or in-the-wild exploita...