CVE-2026-84078

IBM Guardium Data Protection 12.2 contains a missing authentication flaw (CWE-306) in the LoadBalancerServlet , rated CVSS 9.9 (CRITICAL) . An unauthenticated remote attacker can access privileged load-balancer operations, potentially performing unauthorized actions that impact the integrity and ...

CVE-2026-84078 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected...

EUVD-2026-83431

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected...

CVE-2026-84078 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected...

EUVD-2026-83426

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...

CVE-2026-84075

IBM Guardium Data Protection 12.2 is affected by a missing authentication vulnerability in the ChangeTrackerServlet component, allowing a remote, unauthenticated attacker to bypass security restrictions . The vulnerability is rated CVSS 9.9 (Critical) with a changed scope and high integrity impac...

CVE-2026-82885

IBM Guardium Data Protection 12.2 is affected by a missing authorization flaw (CWE-862) in the REST API , allowing a remote authenticated attacker to gain elevated privileges. The flaw is scored CVSS 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning low-privilege remote acc...

EUVD-2026-83312

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing authorization in the REST API...

CVE-2026-82885 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing authorization in the REST API...

CVE-2026-82885 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing authorization in the REST API...

WordPress PDF Builder for WooCommerce. Create invoices,packing slips and more plugin <= 2.0.11 - Missing Authorization to Authenticated (Subscriber+) Sensitive Invoice Data Disclosure vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Invoice Data Disclosure vulnerability discovered by Jaskaranjeet Singh in WordPress Plugin WooCommerce PDF Invoice Builder versions = 2.0.11...

WordPress Search Atlas SEO – OTTO AI SEO Automation for WordPress plugin <= 2.6.23 - Missing Authorization to Authenticated (Subscriber+) Whitelabel Password Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Whitelabel Password Modification vulnerability discovered by Wordfence PRISM in WordPress Plugin Search Atlas SEO versions = 2.6.23...

WordPress Search Atlas SEO – OTTO AI SEO Automation for WordPress plugin <= 2.6.23 - Missing Authorization to Authenticated (Subscriber+) Site-Wide Option Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Site-Wide Option Modification vulnerability discovered by Wordfence PRISM in WordPress Plugin Search Atlas SEO versions = 2.6.23...

CVE-2026-11545

IBM WebSphere Application Server versions 8.5.5.0–8.5.5.29 and 9.0.0.0–9.0.5.28 are affected by a privilege escalation due to missing authorization checks in the administrative console, allowing a remote unauthenticated attacker to obtain sensitive information. CVSS 3.1 score is 3.7 (Low) with hi...

CVE-2026-11545 IBM WebSphere Application Server is affected by a privilege escalation

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...

EUVD-2026-83280

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...

CVE-2026-11545 IBM WebSphere Application Server is affected by a privilege escalation

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...

CVE-2026-93854

In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations PUT /v2/leases/leaseid and DELETE /v2/leases/leaseid. The policy authorize wrapper attempts to load the target lease to build the authorization target from its owner...

WordPress Flex Import plugin <= 3.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Modification vulnerability discovered by Benedictus Jovan aillesiM in WordPress Plugin Flex Import versions = 3.0...

WordPress Easy Appointments plugin <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information Exposure vulnerability

Missing Authorization to Authenticated Contributor+ Sensitive Customer Information Exposure vulnerability discovered by Ryoma Nishioka in WordPress Plugin Easy Appointments versions = 3.12.27...