CVE-2026-19305: Server-Side Request Forgery (SSRF)

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery...

CVE-2026-78543: Loop with Unreachable Exit Condition

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infinite loop...

CVE-2026-18175: Improper Authorization

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper authorization in the DDM target dispatcher...

CVE-2026-18221: Improper Authentication

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation of client-supplied authentication parameters...

The vulnerability of the inet_frag_queue_flush() function in the net/ipv4/inet_fragment.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inetfragqueueflush function in the net/ipv4/inetfragment.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the isert_login_recvdone() function in the drivers/infiniband/ulp/isert/ib_isert.c module of the Linux operating system’s InfiniBand driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the isertloginrecvdone function in the drivers/infiniband/ulp/isert/ibisert.c driver of the Linux operating system’s InfiniBand module is related to incorrect assumptions about the organization of data or memory. Exploiting this vulnerability could allow a remote attacker to...

CVE-2026-75171

An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component...

EUVD-2026-71442

An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component...

The vulnerabilities of the functions nvmet_tcp_build_pdu_iovec() and nvmet_tcp_handle_req_failure() in the Linux kernel’s drivers/nvme/target/tcp.c module allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions nvmettcpbuildpduiovec and nvmettcphandlereqfailure in the driver/nvme/target/tcp.c module of the Linux kernel are related to error handling flaws. Exploiting these vulnerabilities allows a remote attacker to compromise the confidentiality, integrity, and...

The vulnerabilities in the net/netfilter/nf_nat_amanda.c and net/netfilter/nf_nat_sip.c modules of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net/netfilter/nfnatamanda.c and net/netfilter/nfnatsip.c modules in the Linux operating system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity,...

CVE-2025-67066

SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute arbitrary code via the outtype parameter in the /outaddresspaging path...

PT-2026-85779

IBM ContextForge MCP Gateway - Translate utility = 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session...

PT-2026-85747

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

The vulnerability of the qp_send_message() function in the drivers/crypto/hisilicon/sec2/sec_crypto.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qpsendmessage function in the drivers/crypto/hisilicon/sec2/seccrypto.c file of the Linux kernel cryptographic accelerator driver relates to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to...

PT-2026-85685

PowerJob Server version 5.1.2 and likely earlier uses a predictable JWT signing key for HS256-based authentication. This allows a remote attacker to execute arbitrary code...

PT-2026-86249

Name of the Vulnerable Software and Affected Versions Free5GC version 4.2.2 Description A remote attacker can cause a denial of service in the UPF User Plane Function component, which is responsible for packet routing and forwarding in the 5G core network. Recommendations At the moment, there is ...

The vulnerability of the mcp23s08_probe() function in the drivers/pinctrl/pinctrl-mcp23s08_spi.c driver for Linux kernel’s PINCTRL output devices allows a hacker to cause a service failure.

The vulnerability of the mcp23s08probe function in the drivers/pinctrl/pinctrl-mcp23s08spi.c file of the Linux kernel’s GPIO controller driver is related to the pointer assignment. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the __ceph_x_decrypt() function in the net/ceph/auth_x.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the cephxdecrypt function in the net/ceph/authx.c module, which is part of the networking functions in the Linux kernel, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerability of the mod_hdcp_read_rx_id_list() function in the drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c driver module of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the modhdcpreadrxidlist function in the drivers/gpu/drm/amd/display/modules/hdcp/hdcpddc.c driver module of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the execution of operations outside of the buffer...

The vulnerability of the `mark_page_dirty_in_slot()` function in the `virt/kvm/kvm_main.c` module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a malicious actor to trigger a service failure.

The vulnerability of the markpagedirtyinslot function in the virt/kvm/kvmmain.c module of the Kernel-based Virtual Machine KVM subsystem of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause a service...