openssh: OpenSSH: Security restriction bypass via unenforced restrict directive in tunnel forwarding

A flaw was found in OpenSSH. In configurations where tunnel forwarding is enabled on the server, the restrict option in the authorized keys configuration fails to properly block tunnel forwarding requests. An authenticated user connecting with a restricted key can exploit this issue to bypass...

PT-2026-113394

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 Description Incorrect authorization allows a remote attacker to bypass security restrictions. Recommendations At the moment, there is no information about a newer...

KLA91329 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Track can be exploited...

EUVD-2026-95282

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass security restrictions due to improper authentication...

Visual Studio Code Source Editor Security Restriction Bypass

The vulnerability of Visual Studio Code’s source editor is related to the occurrence of interpretation conflicts. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

ROS-20261005-73-0033

The vulnerability of the Rsync file transfer and synchronization utility is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...

Content Credentials SDK Insufficient Validation

The vulnerability of the Content Credentials SDK library is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...

dogtag-pki Authentication Bypass

The vulnerability of the PKI infrastructure creation and management system, as well as the lifecycle of digital certificates in dogtag-pki, is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to...

Fleet Server Host Service Identification Processing Bypass

The vulnerability of the identification processing mechanism of the Kibana data visualization service Fleet Server Host is related to errors in the mechanism for processing relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions...

Glances Input Validation

The vulnerability of the application programming interface of the Glances monitoring tool is related to improper verification of the data entered by the user against a list of allowed values. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...

Podman WORKDIR Security Restriction Bypass

The vulnerability of the WORKDIR processing mechanism in the software platform for managing and launching OCI containers, Podman, is related to the tracking of symbolic links. Exploiting this vulnerability allows a remote attacker to circumvent security restrictions...

CVE-2026-84241 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization...

CVE-2026-18869

IBM i versions 7.3 through 7.6 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the FTP service. Improper validation of PORT and EPRT commands allows a remote authenticated attacker to bypass security restrictions and access internal network services . The CVSS 3.1 base score...

CVE-2026-18869 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

CVE-2026-17262 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

CVE-2026-17262 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

CVE-2026-17262

IBM i versions 7.3 through 7.6 are vulnerable to denial of service and security restriction bypass due to improper validation of FTP authentication commands (CWE-78, OS Command Injection). A local attacker on an adjacent network with no required privileges can exploit this with low complexity, re...

CVE-2026-84081: Improper Certificate Validation

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation...

CVE-2026-84077: Cross-Site Request Forgery (CSRF)

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability...

Rsync Symbolic Link

The vulnerability of the Rsync file transfer and synchronization utility is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...