CVE-2026-18095

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is susceptible to a buffer overflow vulnerability. This flaw could allow a remote authenticated attacker to achieve arbitrary code execution . While the impact is significant, specific details regarding the affected component or functio...

CVE-2026-18074

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to perform unauthorized actions . This security flaw stems from improper authentication and missing authorization within the software. The risk is characterized by an...

CVE-2026-18066

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by vulnerabilities that could allow a local attacker to obtain sensitive information and trigger unauthorized actions. This is caused by server-side request forgery . No specific exploit details or remediation steps are prov...

CVE-2026-17647

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by vulnerabilities that could allow a local attacker to execute arbitrary commands . This issue stems from the inclusion of functionality originating from an untrusted control sphere . The vulnerability is assigned a CVSS 3....

CVE-2026-17646

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability involving the improper restriction of XML external entity references . This flaw could allow a remote authenticated attacker to obtain sensitive information . No specific patch versions or exploit details ...

CVE-2026-17645

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by vulnerabilities that could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management . The vulnerability has a CRITICAL base severity score of 9.1. No specific exploit details ...

CVE-2026-17644

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability where the use of hard-coded credentials could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data . The vulnerability has a CVSS 3.1 base score of 8.8 (H...

CVE-2026-17643

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by multiple vulnerabilities. A local attacker could obtain sensitive information and perform unauthorized actions because of insufficiently protected credentials . Exploitation details and specific remediation steps are not ...

CVE-2026-17637

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by multiple vulnerabilities, including one that allows an adjacent-network attacker to execute arbitrary code . This flaw stems from the deserialization of untrusted data . The CVSS 3.1 score is 8.8 (High), indicating high i...

CVE-2026-17636

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote authenticated attacker to execute arbitrary code . The root cause is identified as the improper validation of a specified quantity . The CVSS 3.1 score is 8.8 (High) , indicating ...

CVE-2026-17635

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to perform unauthorized actions . This issue stems from an improper configuration of HTTP method-based security constraints . The vulnerability is assigned a CRITICAL sev...

CVE-2026-17620

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift versions 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800), 4.0.7.0 , 4.0.8.0 , 4.0.9.0 , and 4.0.10.0 Interim Fix 064 is vulnerable to a security flaw where it transmits sensitive or security-critical data in c...

CVE-2026-17618

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by multiple vulnerabilities stemming from improper authorization . This flaw could allow a remote unauthenticated attacker to view and modify sensitive information or cause a denial of service . No specific patch versions or...

CVE-2026-17472

IBM Concert versions 1.0.0 through 3.0.0 are affected by multiple vulnerabilities where a remote authenticated attacker can access or modify unauthorized resources. This issue is caused by the use of wildcards in RBAC permission definitions . No specific exploit details or remediation instruction...

CVE-2026-17465

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to multiple issues that could allow a remote authenticated attacker to cause a denial of service . The root cause is the improper enforcement of storage limits . No specific exploits or remediation details are provided in the documents.

CVE-2026-17102

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to an OS command injection vulnerability (CVE-2026-17102 ). A remote authenticated attacker could exploit this by taking advantage of the improper neutralization of special elements used in an OS command, potentially leading to the executi...

CVE-2026-16672

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to remote code execution. A remote authenticated attacker can execute arbitrary code due to the improper neutralization of special elements used in an OS command . The CVSS v3.1 score is 8.8 (High) , indicating significant impact o...

CVE-2026-16469

The IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime is vulnerable to an issue where a remote authenticated attacker could execute arbitrary commands. This is caused by the improper neutralization of special elements used in an OS command . The CVSS 3.1 score is 8.8 (High) with a network at...

CVE-2026-16468

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to OS command injection , which could allow a remote authenticated attacker to execute arbitrary commands. The provided documents do not specify the exact component or function responsible for the injection, nor do they provide details on ...

CVE-2026-16426

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to server-side request forgery (SSRF) . This vulnerability allows an authenticated attacker to initiate unauthorized requests from the system, which may result in network enumeration or the facilitation of additional attacks. No specific rem...

CVE-2026-16346

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to an OS command injection flaw (CWE-285 ). A remote authenticated attacker can execute arbitrary commands due to the improper neutralization of special elements used in an OS command. This vulnerability has a CRITICAL base severity score ...

CVE-2026-15915

IBM Concert versions 1.0.0 through 3.0.0 are susceptible to a vulnerability where a local attacker can obtain sensitive information . This is caused by the recursive copying of build context directories into container images. No specific remediation, exploit details, or in-the-wild exploitation r...

CVE-2025-12767

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to a denial of service condition. A remote attacker can exploit this by providing a specially crafted regular expression that triggers excessive resource consumption . No specific remediation steps or exploit details are provided in the docu...

CVE-2025-36084

IBM Concert versions 1.0.0 through 3.0.0 are affected by multiple vulnerabilities involving the use of weaker than expected cryptographic algorithms . This weakness could allow an attacker to decrypt highly sensitive information . No specific exploit information or remediation details are provide...

CVE-2026-75101

An authorization bypass vulnerability exists in GitHub Enterprise Server (versions prior to 3.22) due to a repository name collision flaw. Access tokens for raw pull request diffs and patches were incorrectly scoped to the repository name and pull request number rather than a globally unique iden...

CVE-2026-77912

A stored cross-site scripting (XSS) vulnerability exists in GitHub Enterprise Server within the Markdown rendering pipeline . The flaw occurs because the pipeline rewrote quote characters in already-sanitized HTML without performing subsequent re-sanitization, allowing an authenticated attacker t...

CVE-2026-77987

A server-side request forgery (SSRF) vulnerability exists in the notebook viewer of GitHub Enterprise Server (versions 3.17 through 3.22). The root cause is the failure to validate the port of user-supplied URLs, despite validating the scheme and host. This allows requests to internal services on...

CVE-2026-88020

Autonomy Logic OpenPLC Runtime v3 is susceptible to an improper neutralization of input during web page generation vulnerability. This occurs because the web interface fails to encode a query string parameter used for program routing. Successful exploitation could allow an attacker to hijack sess...

CVE-2026-96260

The Mattermost server is vulnerable to a denial of service because it fails to enforce a request body size limit during CSRF validation of plugin requests. This flaw allows an authenticated user to exhaust server memory by sending a large request body to a plugin endpoint. Affected versions inclu...

CVE-2026-96259

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, and 11.10.x

CVE-2026-96269

GNU Emacs versions 28.1 through 31.1 are vulnerable to arbitrary code execution when a user opens a file. The root cause is an untrusted value of read-symbol-shorthands which negatively impacts the intern and unintern functions. This vulnerability affects the default configuration , requiring no ...

CVE-2026-77426

The Unleash feature management platform (versions prior to 8.0.3 ) contains five authorization vulnerabilities in its admin API. A critical flaw in src/lib/features/segment/segment-controller.ts fails to await the hasPermission() call, allowing authenticated users to bypass permission checks and ...

CVE-2026-67615

The openEQUELLA software prior to version 2026.1.0 is vulnerable to authenticated remote code execution (RCE) via Java deserialization in the HTTP invoker endpoint at /invoker/*. An authenticated non-guest user can bypass the PluginAwareObjectInputStream class-name denylist by nesting a serialize...

CVE-2026-77425

The open-source feature management platform Unleash (versions prior to 8.0.3 ) is vulnerable to a cross-project integrity write. The endpoint POST /api/admin/projects/:projectId/features/:featureName/environments/:environment/strategies/set-sort-order fails to verify that the strategy IDs provide...

CVE-2026-91018

The lwIP (Lightweight IP) open-source TCP/IP stack contains a double free vulnerability . An adjacent network attacker can exploit this flaw to cause a system crash , Denial of Service (DoS) , or memory corruption . Most critically, successful exploitation could lead to arbitrary code execution ,...

CVE-2026-76910

The open-source feature management platform Unleash (versions prior to 8.0.3 ) is vulnerable to an authorization bypass in the cloneFeatureToggle function and the POST /api/admin/projects/:projectId/features/:featureName/clone endpoint. The root cause is that the system validates permissions for ...

CVE-2026-95815

Versions of OpenClaw iOS prior to 2026.8.11 are vulnerable to credential exposure due to the application logging complete agent deep-link URLs to unified logs as public diagnostic data. These logs contain persistent bearer keys , which an attacker can recover from diagnostic archives to replay in...

CVE-2026-95814

Versions of Vaultwarden through 1.37.3 are vulnerable to an authorization bypass due to a missing status check in organization membership validation. Specifically, the application fails to filter membership status in three queries: get_user_collections_access_flags, get_group_collections_access_f...

CVE-2026-95813

The software e621ng (versions before 26.09.16 ) is vulnerable to an Open Redirect due to the improper handling of untrusted request parameters. Specifically, the PaginatorComponent and controller navigation links pass these parameters directly to the Rails url_for function. An attacker can provid...

CVE-2026-95812

ClipBucket v5 before version 5.5.3-#182 is vulnerable to a reflected cross-site scripting (XSS) vulnerability. The issue resides in the sort_link() helper function, which fails to properly sanitize the cat , sort , and time query parameters. An attacker can craft a malicious request containing an...

CVE-2026-76909

The open-source feature management platform Unleash is vulnerable to HTML injection in versions prior to 8.0.3 . The root cause is the use of Mustache triple-stash syntax (e.g., {{{ changeRequestTitle }}}) in the src/mailtemplates/requested-cr-approval/requested-cr-approval.html.mustache template...

CVE-2026-62364

The wlc Weblate command-line client is vulnerable to unauthorized API token disclosure in versions prior to 2.0.1 . If an unscoped API token is provided via WLC_KEY or --key without an explicit WLC_URL or --url, the application may automatically use a project-configured URL from files like .webla...

CVE-2026-94450

The s2n-quic library, version 1.88.0 and earlier , contains a vulnerability where improper validation of the Destination Connection ID length can be exploited. An unauthenticated remote user can trigger a denial of service by shutting down a server endpoint using a single crafted UDP datagram . T...

CVE-2026-79767

The Gardener platform contains an authorization bypass in the customverbauthorizer admission plugin's mustCheckProjectMembers check. The vulnerability stems from the isHumanUser() function, which incorrectly filters for User -kind subjects while ignoring Group and ServiceAccount subjects. This al...

CVE-2026-61570

The MPXJ open-source library (versions 5.5.5 through 16.4.1 ) is vulnerable to an XML External Entity (XXE) injection. The flaw exists in the MerlinReader component when parsing XML from the ZTIMEINTERVALS column of a Merlin project SQLite database. Because the DocumentBuilder uses default settin...

CVE-2026-65829

The MPXJ open-source library (versions 7.3.0 through 16.5.0 ) contains a path traversal vulnerability when processing Primavera P3 PRX or SureTrak STX files. A suitably crafted file can cause the library to write files to arbitrary locations in the filesystem. This issue is addressed in version 1...

CVE-2026-77322

The SIPGO library (prior to version 1.4.3 ) is vulnerable to a Denial of Service (DoS) attack via unvalidated WebSocket frame lengths. The root cause is located in sip/transport_ws.go, where WSConnection.Read creates a wsutil.Reader without setting the MaxFrameSize parameter. This allows an unaut...

CVE-2026-58268

The sipgo library (versions prior to 1.4.1 ) is vulnerable to an unauthenticated Denial of Service (DoS) via an oversized Content-Length header. The vulnerability exists in the ParserStream.parseSingle function within sip/parser_stream.go, where the library allocates a SIP body buffer based on th...

CVE-2026-87121

The lwIP TCP/IP Stack MQTT Client Application is vulnerable to an out-of-bounds write , which could allow an attacker to achieve full code execution on the affected device. While no specific software version or root cause is provided, the vulnerability has been observed in the wild, with sighting...

CVE-2026-83805

Nautobot versions 3.0.0 through 3.1.8 are vulnerable to an authorization bypass in the approval workflow REST API. The generic ApprovalWorkflowStageResponse create endpoint fails to enforce approver-group membership, object change permissions, or the one-response-per-user restriction. An attacker...