Security Bulletin: IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table (CVE-2026-104332)

Summary IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table Vulnerability Details ID: CVE-2026-104332 DESCRIPTION: IBM Db2 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query...

K000163605: OpenSSH vulnerabilities CVE-2026-73281, CVE-2026-73282, and CVE-2026-73283

Security Advisory Description CVE-2026-73281 In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected]...

Security Bulletin: IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management (CVE-2026-105464)

Summary IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management. Vulnerability Details CVEID:CVE-2026-105464 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to gain...

Security Bulletin: IBM® Db2® is affected by multiple vulnerabilities in fence-agents-common (CVE-2026-32597, CVE-2026-30922)

Summary IBM® Db2® is affected by multiple vulnerabilities in fence-agents-common. Vulnerability Details CVEID:CVE-2026-32597 DESCRIPTION: PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC 7515 §4.1.11. Wh...

Security Bulletin: IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance (CVE-2026-105465)

Summary IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance. Vulnerability Details CVEID:CVE-2026-105465 DESCRIPTION: IBM Db2 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance. CWE:CWE-269: Improper Privilege Management...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions (CVE-2026-105466)

Summary IBM® Db2® is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions. Vulnerability Details CVEID:CVE-2026-105466 DESCRIPTION: IBM Db2 is vulnerable to a denial of service when inserting into a table with XML columns under specific...

Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in log4j (CVE-2026-49844)

Summary IBM® Db2® federated server is affected by a vulnerability in log4j. Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue...

Security Bulletin: IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystem (CVE-2026-18166)

Summary IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystem. Vulnerability Details CVEID:CVE-2026-18166 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server...

Privilege escalation in team folders allowing API-only delegated admins to grant unauthorized access to team folders

None...

Team membership information returned on API level based on ID

None...

Shared smart albums in the Photos app can expose files outside the album owner's configured source folders

None...

Write-share collaborator can place a TYPE_TOKEN lock that permanently denies the file owner

None...

Security Bulletin: Security vulnerability affects the Windows S-TAP component as part of IBM Guardium Data Protection (CVE-2026-84290)

Summary Security vulnerability has been addressed in Windows S-TAP component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-84290 DESCRIPTION: IBM Security Guardium Data Protection is affected by an improper validation of user-supplied pointers in the WfpMonitor kern...

Improper input validation in emoji field breaks sidebar in Collectives

None...

Security Bulletin: Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection (CVE-2026-84891)

Summary Security vulnerability has been addressed in the Windows GIM component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-84891 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of hard-coded...

Security Bulletin: Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

Summary Multiple vulnerabilities have been addressed in the Sniffer component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-75875 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary code due to path traversal. CWE:CWE-22:...

K000163593: GnuTLS vulnerability CVE-2026-42009

Security Advisory Description A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with...

Security Bulletin: Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data Protection (CVE-2026-87980)

Summary Security vulnerability has been addressed in the UNIX S-TAP component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-87980 DESCRIPTION: IBM Guardium Data Protection could allow a local attacker to obtain sensitive information due to cleartext storage of...

Security Bulletin: Multiple vulnerabilities affect the Windows S-TAP component as part of IBM Guardium Data Protection (CVE-2026-82344, CVE-2026-82334)

Summary Multiple vulnerabilities have been addressed in the Windows S-TAP component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-82344 DESCRIPTION: IBM Security Guardium is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly...

CVE-2026-63030

WP2Shell — CVE-2026-63030 + CVE-2026-60137 RCE pré-authentification du cœur de WordPress exploit de masse / détecteur 📋 Aperçu de la vulnérabilité Attribut| Détails ---|--- CVE ID| CVE-2026-63030 + CVE-2026-60137 Chaîne| wp2shell — RCE pré-auth Sévérité| 🔴 CRITIQUE CVSS 9.8 Cible| Cœur de WordPre...