CVE Notifier

CVE-2026-17619 CWE-89 8.6

The IBM Platform RTM is affected by an SQL injection vulnerability

IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

cve.org IBM:spectrum-lsf · : · IBM 1 hari lalu

CVE-2026-91203 CWE-363 6.0

Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition

A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a symlink race condition, during privileged file operations such as changing file ownership or permissions…

cve.org Red · Hat:Red · Hat 1 hari lalu

CVE-2026-17262 CWE-78 5.4

IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands.

cve.org IBM:i 1 hari lalu

CVE-2026-11727 CWE-122 8.1

IBM MQ for HPE NonStop is vulnerable to a denial of service issue

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of queue manager responses when re…

cve.org IBM:MQ · for · HPE 1 hari lalu

CVE-2026-11726 CWE-125 8.1

IBM MQ for HPE NonStop is vulnerable to a denial of service issue

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header offset values.

cve.org IBM:MQ · for · HPE 1 hari lalu

CVE-2026-11725 CWE-190 8.8

IBM MQ queue manager is vulnerable to privilege escalation

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing.

cve.org IBM:MQ 1 hari lalu

CVE-2026-91205 CWE-363 6.0

Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race

A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a writable parent directory, the attacker can replace a newly …

cve.org Red · Hat:Red · Hat 1 hari lalu

CVE-2026-11722 CWE-444 4.8

Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability.

cve.org IBM:CICS · TX · Advanced 1 hari lalu

CVE-2026-11716 CWE-122 7.5

IBM MQ for HPE NonStop is vulnerable to a denial of service attack

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster mi…

cve.org IBM:MQ · for · HPE 1 hari lalu

CVE-2026-11711 CWE-502 6.5

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component.

cve.org IBM:WebSphere · Application · Server 1 hari lalu

CVE-2026-11710 CWE-444 6.5

IBM WebSphere Application Server is affected by an HTTP request smuggling vulnerability

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers.

cve.org IBM:WebSphere · Application · Server 1 hari lalu

CVE-2026-11549 CWE-284 6.5

Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerability.

cve.org IBM:CICS · TX · Advanced 1 hari lalu