CVE-2026-81208 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments...

CVE-2026-81208

The IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a critical flaw where the pull endpoint improperly handles encrypted credentials. The system decrypts {dsnextenc}/{encval} blobs using the cluster-wide DSNEXT_SEC_KEY and re-encrypts them under a caller-supplied AES key/IV. Because ...

WordPress Spectra Legacy – Gutenberg Blocks plugin <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposure vulnerability

Authenticated Contributor+ Sensitive Information Exposure vulnerability discovered by se1en in WordPress Plugin Spectra versions = 2.20.0...

OWASP LLM Top 10 2026: Every Move Points the Same Direction

This is Post 4 of a four-part series: Post 1: Agentic AI Security: The Chatbot Era Is Over Post 2: Generative AI Security: Why AI Needs a New Kind of Security Post 3: The OWASP LLM Top 10 Was the Warm-Up: What Comes Next The 2026 edition of the the OWASP Top 10 for LLM Applications, published by...

SUSE CVE-2026-95295

Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physical access. Chromium security severity: Medium...

SUSE CVE-2026-95328

Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Low...

SUSE CVE-2026-95360

Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

Security Bulletin: This Power System update is being released to address CVE-2026-18870

Summary PowerVM Hypervisor could allow a remote attacker to obtain sensitive information due to an out-of-bounds read. Vulnerability Details CVEID:CVE-2026-18870 DESCRIPTION: PowerVM Hypervisor could allow a remote attacker to obtain sensitive information due to an out-of-bounds read. CWE:CWE-125...

CVE-2026-18180

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection...

EUVD-2026-85360

IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2026-18184

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is susceptible to an XML external entity (XXE) injection flaw . This vulnerability could allow a remote attacker to obtain sensitive information from the system. No specific exploit details or remediation steps were provided in the ...

CVE-2026-18181

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to an authentication bypass. A hard-coded cryptographic key allows a remote attacker to bypass security controls and gain access to sensitive information . No specific exploit details, affected versions, or remediation...

CVE-2026-18180 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection...

CVE-2026-18180

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote authenticated attacker to obtain sensitive information . This security flaw is caused by an SQL injection vulnerability. No specific affected versions, remediation steps, or explo...

CVE-2026-73591

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

USN-8805-1 moodle vulnerability

It was discovered that Moodle did not properly restrict URLs. An authenticated user could possibly use this issue to perform a server-side request forgery attack and expose sensitive information...

EUVD-2026-85337

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-73591

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-73591

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-73591

Dell Secure Connect Gateway (SCG) Policy Manager , specifically versions prior to 5.34.00.16 , is affected by an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could exploit this flaw to cause Information exposure . No specific deta...