PT-2026-72345

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ThunderboltIP packet assembly process where the tbnet poll function assembles multi-frame packets into a single socket buffer skb. The tbnet check frame function...

CVE-2026-17081

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-16708

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration...

CVE-2026-17209

IBM Db2 Mirror for i 7.4–7.6 is affected by CVE-2026-17209: the GUI could be exploited by a remote authenticated attacker to execute arbitrary scripts via cross-site scripting. This aligns with the IBM bulletin listing multiple vulnerabilities in Db2 Mirror for i; the CVSS base score is 6.3 (Medi...

CVE-2026-17186 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command...

CVE-2026-17186

IBM Db2 Mirror for i versions 7.4, 7.5 and 7.6 are affected by CVE-2026-17186, a high-severity vulnerability (OS command injection) that could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command. The issue impacts the GUI-facing...

CVE-2026-17182

CVE-2026-17182 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. It allows a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments (CWE-287). The vulnerability has a high impact: CVSS v3.1 base score 9.8 (...

CVE-2026-17181

IBM Db2 Mirror for i 7.4–7.6 is affected by CVE-2026-17181, a path traversal vulnerability that could allow a remote attacker to write files to arbitrary locations. The root cause is improper handling of file paths, enabling unauthorized file writes via network-accessible components. According to...

EUVD-2026-58760

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-17175

CVE-2026-17175 affects IBM Db2 Mirror for i (versions 7.4, 7.5, 7.6). Description: remote authenticated attacker could obtain sensitive information due to improper authentication enforcement. CVSS 3.1 base score 7.5 (HIGH), network attack vector, no user interaction required. Root cause: improper...

CVE-2026-17079

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...

EUVD-2026-58796

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...

EUVD-2026-58794

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

CVE-2026-16905

CVE-2026-16905 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. Description: a remote authenticated attacker could obtain sensitive information due to improper authentication. CVSS v3.1 base score 5.3 (MEDIUM), vectors: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. Root cause: improper authenticat...

CVE-2026-16708 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration...

CVE-2026-16708

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration...

CVE-2026-73295

A flaw was found in Material for MkDocs. A DOM-based Cross-Site Scripting XSS vulnerability exists in the search suggestion feature. A remote attacker could exploit this by crafting a malicious URL with a specially designed query parameter. After user interaction, this could lead to the execution...

CVE-2026-73622

A flaw was found in GitPython. This vulnerability allows a remote attacker to exfiltrate sensitive information, such as environment variables, by crafting malicious URLs. When these URLs are processed during Git operations like fetch or pull, the environment variables are expanded and transmitted...

UBUNTU-CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

CVE-2026-56860

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...