CVE-2026-84421

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to remote code execution because of improper path validation during archive extraction . This flaw, categorized under CWE-22: Path Traversal , allows a remote authenticated attacker to execute arbitrary code. To remediate this vulnerabilit...

CVE-2026-84422

IBM Guardium Data Protection 12.2 is vulnerable to an OS Command Injection (CWE-78) within the CLI certificate SMIME recipient deletion functionality. This flaw allows an authenticated privileged CLI user to execute arbitrary commands with root privileges . IBM has released a fix for version 12.2...

CVE-2026-102728

The NetX Secure software contains two out-of-bounds reads within its client-side TLS/DTLS handshake parsers . The vulnerability occurs because the parsers read fields from a server-supplied message before validating that the message is sufficiently long. Although bounds checks are present and fun...

CVE-2026-84436

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection within the certificate export CLI functionality . A privileged authenticated CLI user can exploit this vulnerability to execute arbitrary commands with root privileges . This issue is caused by the improper neutralization of ...

CVE-2026-102726

The NetX Duo software (referenced via GHSA-2wwp-ffgp-6ggj ) is vulnerable to a worker stall and an out-of-bounds read due to unbounded PPP IPCP Option Parsing . This issue impacts the availability of the system, as indicated by the CVSS metrics. No specific exploit details or remediation versions...

CVE-2026-102725

The software component netxduo (specifically within the eclipse-threadx ecosystem) is vulnerable to an Out-of-bounds Read caused by an Unvalidated MSRP Attribute List Length . The vulnerability could impact system availability . No specific versions, root causes beyond the unvalidated length, or ...

CVE-2026-84440

IBM Guardium Data Protection 12.2 is vulnerable to command injection within its SNMP alert notification functionality. An authenticated attacker capable of influencing policy alert text can cause the SNMP alerter service to execute attacker-controlled data as operating system commands. Because th...

CVE-2026-102724

The Eclipse ThreadX networking stack NetX Duo is affected by a NULL Pointer Dereference vulnerability. The issue occurs specifically when the system attempts to evict the sole MSRP attribute . This flaw can lead to a High Availability impact, as indicated by the CVSS 4.0 metrics. While the vulner...

CVE-2026-102723

A NULL Pointer Dereference vulnerability exists in the software (related to Eclipse ThreadX/netxduo based on provided references) caused by MSRP Attribute Table Exhaustion . The vulnerability results in a high availability impact according to the CVSS 4.0 metric. No specific affected versions, ro...

CVE-2026-84842

IBM Guardium Data Protection 12.2 is susceptible to a path traversal and arbitrary file deletion vulnerability within the Datasource REST component . An authenticated remote attacker can exploit this flaw to delete files, which may result in a denial of service or compromise system integrity . No...

CVE-2026-102722

The FTP Client is vulnerable to a flaw in the IPv4 PASV path where it accepts any address provided in the server's 227 reply . Because validation only ensures the address parses correctly and contains non-zero values, a malicious server can specify an arbitrary address to redirect the client. No ...

CVE-2026-102242

The Google MCP Toolbox for Databases (versions 1.2.0 through 1.9.0 ) is vulnerable to a path traversal flaw due to improper link resolution (CWE-59 / CWE-22 ) in the allowedLocalRoots path validation. Because the system performs lexical path validation without first resolving symbolic links , a r...

CVE-2026-102721

The NetX Duo TFTP client is vulnerable to a heap-buffer-overflow in the nxd_tftp_client.c component. When a remote TFTP server returns an ERROR packet lacking a terminating NUL byte, the client fails to verify the buffer_ptr against the nx_packet_append_ptr during message copying. This causes the...

CVE-2026-102720

The NetxDuo DHCP client is vulnerable to a heap-buffer-overflow due to an incorrect bound check in addons/dhcp/nxd_dhcp_client.c. When parsing TLV options, the pointer data is advanced by size + 2 bytes, but the loop counter i is only advanced by size + 1 bytes. This discrepancy allows a hostile ...

CVE-2026-12345

A race condition exists in the tempfile.TemporaryDirectory cleanup process. An attacker who can modify the tree during cleanup may replace a directory with a symbolic link , causing the process to delete files or reset permissions and flags on files outside the temporary directory. This vulnerabi...

CVE-2026-102719

The NetX Secure networking stack is vulnerable to a Predictable DTLS HelloVerifyRequest Cookie . This issue allows for the bypass of the DTLS cookie exchange mechanism, which is intended to prevent DoS attacks. While the base severity is MEDIUM (6.3), the attack complexity is rated as HIGH . No s...

CVE-2026-102718

The NetX Duo SNMP addon contains a vulnerability in the _nx_snmp_utility_object_id_get function. The component fails to validate the claimed OID data length against the actual buffer size when using BER multibyte length encoding . A remote attacker can send a crafted SNMP packet with an OID lengt...

CVE-2026-102716

An unauthenticated client can cause a Denial of Service (DoS) on an RTSP server by draining its packet pool. The vulnerability exists in the Session branch of the parser within nx_rtsp_server.c, where a failure in _nx_utility_string_to_uint returns a raw NetX error code instead of a proper RTSP s...

CVE-2026-102677

The Electron framework (versions 42.3.3 to 42.10.0 , 43.5.0 , and 44.0.0-beta.6 ) is vulnerable to a sandboxed preload code cache poisoning issue. The root cause is a lack of verification ensuring that a cached entry matches the preload it was originally served for. A compromised renderer can inj...

CVE-2026-102715

A heap-buffer overflow vulnerability exists in the mDNS implementation within NetX Duo (specifically in addons/mdns/nxd_mdns.c). The root cause is a logic error where the string cache lookup compares the rounded slot size rather than the actual string length . This allows names with lengths of 12...

CVE-2026-102714

The Netxduo stack is vulnerable to a memory safety issue in the _nx_icmpv6_validate_options() function within common/src/nx_icmpv6_validate_options.c. The function fails to adequately validate the tail of an ICMPv6 option area, leaving a one- or two-byte residue unexamined while returning NX_SUCC...

CVE-2026-102713

The NetX Duo TFTP server is vulnerable to a heap-buffer overflow and a denial-of-service condition due to a missing upper-bound check on incoming DATA datagrams . Because the server fails to validate that nx_packet_length is within the protocol maximum of 4 + NX_TFTP_FILE_TRANSFER_MAX, it allows ...

CVE-2026-102712

A vulnerability exists in the DTLS parser where it incorrectly validates the ciphersuite-list length against the total record length rather than the remaining bytes during the first ClientHello . This flaw allows an unauthenticated peer to trigger an Out-of-Bounds (OOB) source read of up to 255 b...

CVE-2026-102711

The ThreadX loadable-module loader contains two issues triggered when a device loads an attacker-controlled module via the _txm_module_manager_memory_load or _txm_module_manager_in_place_load APIs. Because these APIs accept only a base pointer without an image length, fields in TXM_MODULE_PREAMBL...

CVE-2026-102710

In builds with TX_ENABLE_EVENT_TRACE , a user-mode, memory-protected module can register an arbitrary function pointer as the global trace-full callback. The kernel calls this pointer directly from privileged kernel code without validation or a trampoline when the trace buffer wraps. This allows ...

CVE-2026-102709

An improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker in the non-secure world to provide pointers to secure memory. The secure firmware fails to verify these pointers before dereferencing them, leading to unintended...

CVE-2026-102762

The NetX Duo MQTT client contains a vulnerability where it leaks packets carrying malformed PUBLISH messages . The underlying cause is that each malformed message consumes one or more packets from the network driver's receive pool without returning them. A peer sending a few dozen such messages c...

CVE-2026-95340

A flaw in the PictureInPicture component of Google Chrome (and chromium-browser ) prior to version 154.0.8037.57 allows a remote attacker to bypass the web origin policy . By leveraging social engineering to convince a user to interact with a crafted HTML page, an attacker can cross security boun...

CVE-2026-95305

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a UI misrepresentation in the Chromoting component. A remote attacker can leverage social engineering and crafted network traffic to spoof UI elements. This issue has been addressed in the 154.0.8037.57 update, which is available acr...

CVE-2026-95364

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a low severity security issue where improper input validation in the Passwords component allows a remote attacker to spoof UI elements through a crafted HTML page. Remediation is available in version 154.0.8037.57 ; updates are also ...

CVE-2026-95316

Google Chrome, specifically within the Performance component, contains an unchecked return value flaw. This vulnerability allows a local attacker to potentially read memory via a local program. The issue affects versions prior to 154.0.8037.57 . Remediation is available in version 154.0.8037.57 ,...

CVE-2026-95328

A confused deputy vulnerability in the Mobile component of Google Chrome on Android (prior to version 154.0.8037.57 ) allows a local attacker to obtain sensitive information from a co-installed app by leveraging social engineering. This issue has been addressed in recent updates, such as the 154....

CVE-2026-95342

A missing authorization vulnerability in the V8 engine of Google Chrome (prior to version 154.0.8037.57) allows a remote attacker to bypass the web origin policy through a crafted HTML page. This issue has been addressed in recent security updates, such as the stable channel update for desktop an...

CVE-2026-95296

Google Chrome on Mac versions prior to 154.0.8037.57 is vulnerable to a missing authorization issue in Core . A remote attacker could leverage social engineering and a crafted HTML page to obtain cross-origin data . Remediation is available in version 154.0.8037.57 ; users are encouraged to updat...

CVE-2026-95309

Google Chrome on iOS prior to version 154.0.8037.57 is vulnerable to a UI misrepresentation flaw. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements . Impact is categorized as Low by Chromium security severity. Remediation is available in version 154.0.8037.57 ...

CVE-2026-95361

A confused deputy vulnerability in the DevTools feature of Google Chrome (prior to version 154.0.8037.57 ) allows a remote attacker to bypass the browser's web origin policy . By using social engineering to trick a user into viewing a specially crafted HTML page, an attacker can exploit this flaw...

CVE-2026-95380

A type confusion vulnerability exists in the V8 engine of Google Chrome prior to version 154.0.8037.57 . A remote attacker could leverage social engineering to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . The vulnerability impacts Chromium -based browsers and w...

CVE-2026-95288

Google Chrome on iOS prior to version 154.0.8037.57 is vulnerable to a UI misrepresentation flaw. A remote attacker can spoof UI elements by tricking the user into visiting a crafted HTML page . This issue has been addressed in the 154.0.8037.57 update, as confirmed by Fedora and Debian security ...

CVE-2026-95326

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a flaw in the Bluetooth component due to incomplete cleanup . A remote attacker can exploit this by using social engineering to trick a user into visiting a crafted HTML page , potentially allowing them to bypass system access restri...

CVE-2026-95385

An inappropriate implementation in PlatformIntegration within Google Chrome on Windows (prior to version 154.0.8037.57 ) allows a remote attacker to bypass system access restrictions. This vulnerability can be triggered via a crafted HTML page leveraging social engineering . Impact is characteriz...

CVE-2026-95368

Google Chrome versions prior to 154.0.8037.57 are vulnerable to an incorrect authorization flaw within DevTools . A remote attacker can exploit this via social engineering using a crafted HTML page to potentially obtain cross-origin data . Impact is categorized as low severity. Remediation is ava...

CVE-2026-95319

A use after free vulnerability in the Printing component of Google Chrome (prior to version 154.0.8037.57 ) allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox. This can be triggered via a crafted HTML page . The issue has be...

CVE-2026-95279

Google Chrome on Android prior to version 154.0.8037.57 is vulnerable to a UI misrepresentation in the Omnibox . A remote attacker can exploit this by using a crafted HTML page to spoof the address bar . Security updates for various distributions, including Debian (trixie) and Fedora , have addre...

CVE-2026-95292

Google Chrome versions prior to 154.0.8037.57 are vulnerable to an incorrect authorization flaw within the Safebrowsing component. A remote attacker can exploit this by sending crafted network traffic to bypass system access restrictions. This issue has been addressed in version 154.0.8037.57 . E...

CVE-2026-95352

Google Chrome versions prior to 154.0.8037.57 are vulnerable to an incorrect authorization flaw in DevTools . A remote attacker can leverage social engineering to trick a user into installing a crafted Chrome extension, which allows the attacker to bypass the web origin policy . This exploit coul...

CVE-2026-95367

An information leak exists in the DataTransfer component of Google Chrome versions prior to 154.0.8037.57 . A remote attacker who has already compromised the renderer process can use social engineering and a crafted HTML page to obtain sensitive information. Remediation is available in version 15...

CVE-2026-95308

An integer overflow in the Metrics component of Google Chrome (prior to version 154.0.8037.57) allows a remote attacker to read memory outside the security sandbox. This vulnerability is exploitable by an attacker who has already compromised the renderer process and can convince a user to visit a...

CVE-2026-95278

A missing authorization flaw in the WakeLock component of Google Chrome (prior to version 154.0.8037.57 ) allows a remote attacker to bypass system access restrictions. To exploit this, the attacker must first compromise the browser's renderer process and then convince a user to open a specially ...

CVE-2026-95327

Google Chrome contains an information leak in its Networking component in versions prior to 154.0.8037.57 . A remote attacker can exploit this vulnerability to leak sensitive information through a crafted HTML page . The security severity is rated as Low by Chromium. Remediation is available in v...

CVE-2026-95334

Google Chrome versions prior to 154.0.8037.57 are vulnerable to an incorrect reference resolution in the WebProtect component. A remote attacker who has successfully compromised the renderer process could exploit this flaw to execute arbitrary code outside the sandbox using a crafted HTML page. R...