CVE-2026-18144 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...

CVE-2026-18144

CVE-2026-18144 affects IBM i 7.3–7.6 (Navigator for i). A remote authenticated attacker could bypass security restrictions due to improper authorization. IBM lists multiple IBM i Navigator/OS vulnerabilities with this and related CVEs; CVSS base score for this entry is 4.3 (low to medium). Remedi...

CVE-2026-18144 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...

CVE-2026-65938

In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions...

EUVD-2026-57263

In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions...

CVE-2026-65938 WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API.

In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions...

CVE-2026-65938 WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API.

In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions...

CVE-2026-65938

WhatsUp Gold is affected in versions released before 2026.0.2 by an improper authorization vulnerability in the Scheduled Reports API that lets any authenticated user invoke restricted actions. The issue is documented across CVE-2026-65938 entries (NVD, CVE List) and is addressed in the 26.0.2 re...

CVE-2026-65938

In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a privilege escalation (CVE-2026-18499)

Summary IBM WebSphere Application Server Liberty is affected by a privilege escalation with the collectiveController-1.0 or collectiveMember-1.0 enabled. Vulnerability Details CVEID:CVE-2026-18499 DESCRIPTION: IBM WebSphere Application Server Liberty is vulnerable to a privilege escalation when...

CVE-2026-18244: Missing Authorization

GitLab has remediated an issue in GitLab EE affecting all versions from 17.7 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to view restricted configuration settings due to improper authorization checks on a group...

PT-2026-71119

Name of the Vulnerable Software and Affected Versions WhatsUp Gold versions prior to 2026.0.2 Description An improper authorization issue in the Scheduled Reports API allows any authenticated user to perform restricted actions. Improper authorization occurs when an application fails to properly...

PT-2026-71327

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description An improper authorization issue exists in a specific command that allows a non-privileged user to bypass authority checks and modify database catalog dat...

CVE-2026-18144: Improper Authorization

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...

PT-2026-71160

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authorization in the handling of high-authority threads allows a remote authenticated attacker to escalate privileges. Recommendations At the moment, there is no information about a newer...

PT-2026-71165

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authorization may allow a remote authenticated attacker to bypass security restrictions. Recommendations At the moment, there is no information about a newer version that contains a fix for...

CVE-2026-16480: Client-Side Enforcement of Server-Side Security

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data...

PT-2026-71200

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.7 through 19.0.5 GitLab EE versions 19.1 through 19.1.3 GitLab EE versions 19.2 through 19.2.1 Description An improper authorization check on a group settings page allows an authenticated user to view restricted...

PT-2026-71219

Name of the Vulnerable Software and Affected Versions GitLab EE versions 19.1 through 19.1.3 GitLab EE versions 19.2 through 19.2.1 Description An issue exists where an authenticated user could cause AI usage to be attributed to another namespace. This occurs due to improper authorization of...

PT-2026-71198

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 19.0 through 19.0.5 GitLab CE/EE versions 19.1 through 19.1.3 GitLab CE/EE versions 19.2 through 19.2.1 Description Improper authorization in pipeline reference validation allows an authenticated user with developer-role...