| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-123158 | 8.1 | sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accou | 2026-11-08 03:16:37 | 2026-11-05 16:17:47 |
| CVE-2026-114713 | 8.6 | The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that are | 2026-11-08 03:16:36 | 2026-11-08 03:16:33 |
| CVE-2026-19131 | 6.5 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow low-privileged users to query arbitrary indices and read sensitive data due to missing authorization. | 2026-11-08 02:17:05 | 2026-11-07 05:19:01 |
| CVE-2026-19128 | 7.5 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks. | 2026-11-08 02:17:05 | 2026-11-07 05:19:00 |
| CVE-2026-19126 | 5.9 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. | 2026-11-08 02:17:04 | 2026-11-07 05:19:00 |
| CVE-2026-19124 | 6.8 | IBM API Connect 10.0.8.0 through 10.0.8.12 could allow an attacker with access to stored data to decrypt sensitive credentials due to the use of a hard-coded cryptographic key. The key protecting stored credentials is built into the product, so crede | 2026-11-08 02:17:04 | 2026-11-07 05:19:00 |
| CVE-2026-18689 | 4.3 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accepted where | 2026-11-08 02:17:04 | 2026-11-07 05:18:59 |
| CVE-2026-18535 | 9.6 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of Service (ReDoS) attack and to improper neutralisation of wildcard query operators. | 2026-11-08 02:17:04 | 2026-11-07 05:18:59 |
| CVE-2026-17428 | 5.0 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization decisions | 2026-11-08 02:17:04 | 2026-11-07 05:18:58 |
| CVE-2026-17409 | 9.4 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls ar | 2026-11-08 02:17:04 | 2026-11-07 05:18:58 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39927
Zapisa po stranici: