EUVD-2026-98077

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding...

EUVD-2026-98081

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control...

EUVD-2026-98083

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction...

PT-2026-111673

Name of the Vulnerable Software and Affected Versions Ivanti Xtraction versions prior to 2026.4 Description An External Control of File Name or Path issue allows a remote authenticated attacker to redirect application-generated requests to an endpoint under their control. This can lead to the the...

CVE-2026-93886: Improper Neutralization of Input During Web Page Generation

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input...

CVE-2026-106047: Improper Limitation of a Pathname to a Restricted Directory

A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files...

CVE-2026-106035: Insertion of Sensitive Information into Log File

An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log...

CVE-2026-75826: Improper Neutralization of Special Elements used in an OS Command

Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices, RUTOS 7.22 before 7.25.2 TAP devices, and TSWOS 1.9 before 1.10.4 TSW and SWM devices allows a remote authenticated...

CVE-2026-109412: Exposed Dangerous Method or Function

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information...

CVE-2026-81858

IBM i versions 7.3, 7.4, 7.5, and 7.6 (affected product feature 5770-SS1 ) are vulnerable to a denial of service and unauthorized information disclosure . The root cause is an out-of-bounds read (CWE-125) within the File Server component, which can be triggered by a remote authenticated attacker....

CVE-2026-82108

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-82101

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-82096

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-102627

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction...

CVE-2026-93891 Security Vulnerability identified in IBM TRIRIGA - XXE

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection flaw...

CVE-2026-102627 Security Vulnerability identified in IBM TRIRIGA - Zip Slip

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction...

CVE-2026-102627

The IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 are vulnerable to a Zip Slip path traversal vulnerability (CWE-22 ). A remote authenticated attacker could exploit improper validation of file paths during archive extraction to achieve arbitrary code execution . The vulnerability ...

CVE-2026-82101 DataStage on Cloud Pak for Data Path Traversal

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-82101

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to a path traversal vulnerability (CWE-22 ). This flaw could allow a remote authenticated attacker to cause a denial of service (DoS). To remediate this issue, IBM strongly recommends upgrading to DataStage on Cloud Pak for Data 5....

CVE-2026-82103

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to an information disclosure vulnerability (CVE-2026-82103 ). A remote authenticated attacker could obtain sensitive information due to the exposure of data to an unauthorized actor. This issue is classified under CWE-200 and has a...