994675 matches found
EUVD-2026-71476
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds...
EUVD-2026-71469
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow...
CVE-2026-17470 IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow...
CVE-2026-17470
IBM i versions 7.3 through 7.6 are affected by a denial of service vulnerability in the Line Printer Daemon (LPD) caused by a buffer overflow (CWE-787: Out-of-bounds Write). A remote attacker with no privileges required can trigger the DoS over the network with low attack complexity. The CVSS v3....
CVE-2026-18078 IBM i is Affected By Denial of Service Vulnerability in Save Restore []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to an integer overflow...
EUVD-2026-71460
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to an integer overflow...
EUVD-2026-71459
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a memory leak...
CVE-2026-18175
IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected by an improper authorization flaw (CWE-285) in the DDM target dispatcher component of Distributed Data Management. A remote attacker with no prior access could manipulate database transactions , resulting in high integrity impact and low confiden...
EUVD-2026-71458
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper authorization in the DDM target dispatcher...
EUVD-2026-71607
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation of client-supplied authentication parameters...
CVE-2026-18221
IBM i versions 7.3 through 7.6 are vulnerable to improper authentication (CWE-287) in Distributed Data Management (DDM) / Distributed Relational Database Architecture (DRDA) . A remote attacker with no privileges or user interaction can gain unauthorized access by supplying crafted authentication...
EUVD-2026-71606
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow...
CVE-2026-18341
IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to a heap-based buffer overflow (CWE-122) caused by an integer underflow , allowing a remote authenticated attacker to corrupt memory. IBM rates the vulnerability 6.3 (Medium) with low impact across confidentiality, integrity, and availability,...
CVE-2026-18341 IBM i is Affected By Buffer Overflow Vulnerability []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow...
CVE-2026-18489
IBM ContextForge MCP Gateway – Translate utility (≤ 1.0.8) is affected by a cross-client credential context confusion in the Translate service (mcpgateway/translate.py) when the --enable-dynamic-env flag is active. The service maps HTTP request headers (e.g. Authorization) into a shared stdio sub...
EUVD-2026-71604
IBM ContextForge MCP Gateway - Translate utility = 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session...
AZL-99539 CVE-2026-80789 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: bound SGL data length before allocating command buffers nvmettcpmapdata reads the host-controlled 32-bit sgl-length and, for the in-capsule offset descriptor type 0x01, checks it against port-inlinedatasize before use...
CVE-2026-80788
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I tripped a kernel warning in nvmettcpmapdata because the length passed into the allocator is controlled by the remote...
AZL-99503 CVE-2026-80788 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I tripped a kernel warning in nvmettcpmapdata because the length passed into the allocator is controlled by the remote...