EUVD-2026-104667

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition...

EUVD-2025-211135

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31532)

In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro-uniq use-after-free in rawrcv rawrelease unregisters raw CAN receive filters via canrxunregister, but receiver deletion is deferred with callrcu. This leaves a window where rawrcv may still be running in an RCU...

PT-2026-119277

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Core. The supported version that is affected is 8.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful...

CVE-2026-19178

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition...

CVE-2025-36069

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

CVE-2025-36252

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system...

CVE-2025-36061

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources...

CVE-2025-36061

The IBM Storage TS4500 Library (versions 1.1.1.6 through 1.12.0.3) and IBM Diamondback Tape Library are vulnerable to a Denial of Service (DoS) attack. An authenticated user can submit specially crafted SMTP requests that consume excessive system resources (CWE-770), leading to a high availabilit...

CVE-2025-36061 TS4500 Tape Library Denial of Service

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources...

CVE-2025-36069

The IBM Storage TS4500 Library (versions 1.1.1.6 through 1.12.0.3 ) is vulnerable to Insufficient Session Expiration (CWE-613). The Web UI and REST interfaces fail to properly invalidate active user sessions following security-sensitive actions, such as logouts, password changes, password resets,...

CVE-2025-36069 TS4500 Tape Library Insufficient Session Expiration

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

CVE-2025-36252 TS4500 Tape Library Insufficient Session Expiration

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system...

CVE-2025-36252

The IBM Storage TS4500 Library (versions 1.1.1.6 through 1.12.0.3) and Diamondback Tape Library are vulnerable to CVE-2025-36252 due to Insufficient Session Expiration (CWE-613). The Web UI fails to generate a new session identifier after successful authentication, allowing pre-authentication ide...

CVE-2026-19178

The IBM Storage TS4500 Library (versions 1.1.1.6 through 1.12.0.3 ) is vulnerable to a race condition (CWE-362) within its Web UI and REST interfaces . This flaw allows a remote authenticated attacker with administrative-level role-mapping privileges to modify their own role mapping. If a user pe...

CVE-2026-19178 TS4500 Tape Library Race Condition

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition...

GO-2026-6734 Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage in github.com/0xJacky/Nginx-UI

Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage in github.com/0xJacky/Nginx-UI...

GO-2026-6748 Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access in code.vikunja.io/api

Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is...

aioboto3 (>=1.1.0, <=2.1.0), aiobotocore (>=0.4.2, <=0.4.5) +2 more potentially affected by CVE-2026-111064 via aiohttp (2.3.0)

aiohttp PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioboto3 =1.1.0, =0.4.2, =0.4.1b31, =0.6.0b19, =0.6.0b23 Source cves: CVE-2026-111064 Source advisory: OSV:GHSA-5WR8-GCQF-GQF3...

aioboto3 (>=1.1.0, <=2.1.0), aiobotocore (>=0.4.2, <=0.4.5) +2 more potentially affected by CVE-2026-111063 via aiohttp (2.3.0)

aiohttp PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioboto3 =1.1.0, =0.4.2, =0.4.1b31, =0.6.0b19, =0.6.0b23 Source cves: CVE-2026-111063 Source advisory: OSV:GHSA-494J-54XM-RWP3...