CVE-2026-17503

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter...

CVE-2026-17504

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the...

CVE-2026-17504 This Power System update is being released to address

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the...

CVE-2026-17504

The IBM PowerVM Hypervisor is vulnerable to an Integer Underflow (CWE-191) within the partition firmware runtime. An attacker with root access to a partition can transmit a specially crafted request to the runtime, leading to a system crash and potential memory corruption . Affected versions incl...

EUVD-2026-85890

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the...

CVE-2026-17504 This Power System update is being released to address

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the...

CVE-2026-17503 This Power System update is being released to address

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter...

Malicious code in @nf-addons/am-global-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4f7297a2ae76eee65506183462a7138df6115ee2bfad9c84878b7f3c7998c8 The package's install lifecycle script runs node index.js, which loads runtime/support/telemetry/probe/impl.js. That module reads os.userInfo.usernam...

CVE-2026-67228

A flaw was found in RabbitMQ. An authorized policymaker can exploit this vulnerability by issuing a large number of requests with distinct component values to the runtime-parameters lookup path. This action coerces attacker-supplied strings into new atoms, eventually exhausting the Erlang atom...

CVE-2026-97407

In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchippdm: Handle runtime PM resume failures in setfmt rockchippdmsetfmt calls pmruntimegetsync before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function...

Cisco Identity Services Engine (cisco-sa-ise-multiauth-bypass-sgD2HbL4)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device. CVE-2026-76444 - A...

CVE-2026-97512: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error handling that could leave the system in an inconsistent state. If any operation failed midway through suspend or resume...

PT-2026-97809

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions FW1120.00 through FW1120.01 IBM PowerVM Hypervisor versions FW1110.00 through FW1110.31 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.81 IBM PowerVM Hypervisor versions FW950.00 through FW950.H3...

CVE-2026-17504: Integer Underflow (Wrap or Wraparound)

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the...

CVE-2026-63645: Exposure of Sensitive Information to an Unauthorized Actor

OpenObserve is a cloud-native observability platform. Prior to 0.90.3, OpenObserve registers the /config/runtime endpoint without authentication and serializes the complete server configuration after applying the hidesensitivefields keyword filter. The filter does not recognize dsn or creds field...

PT-2026-98199

Name of the Vulnerable Software and Affected Versions OpenObserve versions prior to 0.90.3 Description The '/config/runtime' endpoint is registered without authentication. The system serializes the server configuration using a hide sensitive fields keyword filter that fails to recognize field nam...

CVE-2026-97512

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error handling that could leave the system in an inconsistent state. If any operation failed midway through suspend or resume...

Linux Distros Unpatched Vulnerability : CVE-2026-97512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error handling that could leave the system in an...

PT-2026-98317

Name of the Vulnerable Software and Affected Versions containerd versions prior to 1.7.36 containerd versions prior to 2.0.13 containerd versions prior to 2.2.9 containerd versions prior to 2.3.6 containerd versions prior to 2.4.1 Description A crafted OCI index graph can cause excessive CPU and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124476)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124476 advisory. Within HostnameError.Error, when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is...