PT-2026-108280

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.2 and 12.2.2 Description A missing authentication requirement for a critical function allows a remote attacker to execute arbitrary management operations. Recommendations At the moment, there is no...

PT-2026-108269

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

PT-2026-108272

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on t...

PT-2026-108240

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

PT-2026-108237

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description Remote unauthenticated attackers can execute arbitrary code on the system, including appliance and container variants...

PT-2026-108238

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description Remote unauthenticated attackers can execute arbitrary code on the system. This is caused by the deserialization of...

PT-2026-108229

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of command arguments. Th...

PT-2026-108230

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description Improper authentication mechanisms may allow a remote attacker to bypass authentication. Recommendations At the momen...

PT-2026-108010

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 IBM DataPower Gateway versions 10.6.1 through 10.6.6 IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 Description An XM...

PT-2026-107998

Name of the Vulnerable Software and Affected Versions ILIAS versions prior to 9.24 ILIAS versions 10.x prior to 10.12 ILIAS versions 11.x prior to 11.5 Description An argument injection issue exists in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options throu...

PT-2026-108267

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description An issue exists that allows a remote attacker to execute unauthorized SQL statements on security database appliances. This is caused by SQL injection, a technique where...

Aruba ClearPass Policy Manager 6.11.x < 6.11.16 / 6.14.x < 6.14.1 Multiple Vulnerabilities (HPESBNW05158)

The version of Aruba ClearPass Policy Manager installed on the remote host is 6.11.x prior to 6.11.16, or 6.14.x prior to 6.14.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HPESBNW05158 advisory. - Deserialization of untrusted data vulnerabilities exist in the web...

PT-2026-108174

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A heap-based buffer overflow exists in the MongoDB protocol parser. A remote attacker can trigger memory corruption by sending a specially crafted MongoDB SCRAM username with ...

PT-2026-108180

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description The edge-controller component lacks proper authentication. This allows an unauthenticated remote attacker to execute arbitrary container images a...

PT-2026-108232

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description Improper authentication may allow a remote authenticated attacker to bypass security restrictions. Recommendations At...

PT-2026-108228

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description Remote authenticated attackers can perform unauthorized actions due to argument injection, a flaw where untrusted inp...

PT-2026-108226

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description A protection mechanism failure allows a remote authenticated attacker to execute arbitrary code. Recommendations Upda...

PT-2026-108276

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description Improper neutralization of special elements used in an SQL command allows a remote attacker to execute arbitrary SQL commands. This issue is caus...

Langflow AI Custom Component Eval Injection Unauthenticated Remote Code Execution

Langflow version 1.3.2 is susceptible to unauthenticated remote code execution due to improper input validation in the evalcustomcomponentcode function. Arbitrary code executes under the context of the backend Langflow process. This module requires Metasploit: https://metasploit.com/download...

CVE-2025-32433

CVE-2025-32433 A critical vulnerability in Erlang/OTP SSH server allows unauthenticated remote code execution RCE. The flaw exists in the SSH protocol message handling mechanism, enabling attackers to execute arbitrary commands without requiring authentication credentials. Impact Critical severit...