CVE-2026-18177 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks...

CVE-2026-18177

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a security flaw where a remote attacker can execute unauthorized payment actions . The root cause is missing authorization checks (CWE-862), which could lead to high integrity impact and low availability impact. This vu...

CVE-2026-95676

A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply...

EUVD-2026-85287

A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply...

CVE-2026-95676 AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass

A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply...

CVE-2026-95676

The WatchGuard AuthPoint Gateway is susceptible to a missing/improper authentication vulnerability within its LDAP Sync first-factor authentication mechanism. Under non-default operating conditions, a remote attacker can bypass single-factor password verification. However, the impact is limited a...

CVE-2026-83602

A flaw was found in Netdata, an open-source observability tool. An unauthenticated remote attacker can bypass IP allowlist restrictions by sending PUT requests to the /api/v3/settings endpoint. This allows the attacker to write arbitrary data to a settings file, potentially leading to a Denial of...

CVE-2026-83599

A flaw was found in Netdata. An unauthenticated remote attacker can exploit a vulnerability in the WebSocket server's decompression mechanism. By sending small, highly compressed messages, the attacker can cause the server to allocate excessive amounts of memory. This can lead to the exhaustion o...

CVE-2026-77396

A flaw was found in PJSIP. A heap buffer overflow vulnerability exists in the AVI Audio Video Interleave parser. A remote attacker could exploit this by providing a specially crafted AVI file. When an application processes this file, it can lead to memory corruption, potentially allowing the...

CVE-2026-77164

A flaw was found in Nextcloud. An unauthenticated remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability in the Circles component. By sending a specially crafted request to the public endpoints, the attacker can force the server to make GET requests to internal network...

pgbouncer: PgBouncer: Denial of Service via integer overflow in packet buffer growth

A flaw was found in PgBouncer. An unauthenticated remote attacker can exploit an integer overflow in the packet buffer growth logic by providing sufficiently large input. This causes the buffer size computation to overflow, leading to an infinite loop. As a result, a CPU core is saturated, and al...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in postcss-selector-parser (CVE-2026-9358)

Summary A Regular Expression Denial of Service ReDoS vulnerability in the postcss-selector-parser library CVE-2026-9358 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 7.1.4. Vulnerability Details CVEID:CVE-2026-9358 DESCRIPTION: A vulnerabilit...

EUVD-2026-85172

An Improper Authentication vulnerability in the Apache Doris Frontend FE meta service allows an unauthenticated remote attacker to access internal metadata service endpoints. The affected endpoints relied on client-supplied node information for authentication without providing sufficient...

CVE-2026-31377

An Improper Authentication vulnerability exists in the Apache Doris Frontend (FE) meta service , allowing an unauthenticated remote attacker to access internal metadata service endpoints. The root cause is that affected endpoints rely on client-supplied node information for authentication without...

CVE-2026-54354

A flaw was found in MapServer, a system for developing web-based Geographic Information System GIS applications. The PostGIS runtime filter translation incorrectly processes attacker-controlled input as numeric without proper validation. This allows an unauthenticated remote attacker, with access...

CVE-2026-15027

The CGServiSign software developed by Changing contains an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this by inducing victims to visit a malicious web page, which then triggers the injection of arbitrary OS commands through the local service interface . This...

EUVD-2026-85168

CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrary OS commands through the local service interface, resulting in command execution on the victim's local computer...

CVE-2026-15027 Changing｜CGServiSign - OS Command Injection

CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrary OS commands through the local service interface, resulting in command execution on the victim's local computer...

CVE-2026-93312

A flaw was found in Freedesktop Poppler. A remote attacker could exploit a null pointer dereference vulnerability in the JBIG2Stream::rewind function. This could lead to a denial of service DoS, making the application unavailable to legitimate users. Mitigation Since Poppler is a library used by...

CVE-2026-93311

A flaw was found in Freedesktop Poppler. A remote attacker could exploit an integer overflow vulnerability by manipulating the BitsPerSample argument within the SampledFunction::SampledFunction function. This manipulation could lead to an integer overflow, potentially causing a denial of service...