Live intelligence wire — exploitation & rulemaking

2026-10-12 NVD CVE

CVE-2026-19622: IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass auth HIGH

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.

2026-10-09 NVD CVE

CVE-2026-76779: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, HIGH

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access...

2026-10-08 NVD CVE

CVE-2026-82344: IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer ove HIGH

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login...

2026-10-08 NVD CVE

CVE-2026-82900: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to d HIGH

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.

2026-10-08 NVD CVE

CVE-2026-84246: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker HIGH

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

2026-10-08 NVD CVE

CVE-2026-82335: IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buff HIGH

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an...

2026-10-08 NVD CVE

CVE-2026-82334: IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out- HIGH

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid...

2026-10-08 NVD CVE

CVE-2026-84209: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to e HIGH

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

2026-10-08 NVD CVE

CVE-2026-84057: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to e HIGH

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

2026-10-08 NVD CVE

CVE-2026-84058: IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer over HIGH

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to...

2026-10-08 NVD CVE

CVE-2026-84198: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker HIGH

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

2026-10-08 NVD CVE

CVE-2026-14888: IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0. HIGH

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.

2026-10-08 NVD CVE

CVE-2026-81932: IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection HIGH

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or...

2026-10-08 NVD CVE

CVE-2026-84035: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker HIGH

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

2026-10-08 NVD CVE

CVE-2026-82895: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker HIGH

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

2026-10-07 NVD CVE

CVE-2026-93675: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute a HIGH

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion.

2026-10-06 NVD CVE

CVE-2026-82162: Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper HIGH

Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...

2026-10-06 NVD CVE

CVE-2026-106218: In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leadin HIGH

In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible

2026-09-30 NVD CVE

CVE-2026-100273: In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts de HIGH

In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution

2026-09-30 NVD CVE

CVE-2026-100277: In JetBrains YouTrack before 2026.2.19197 account takeover was possible by repla HIGH

In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature

2026-09-30 NVD CVE

CVE-2026-103109: Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper in HIGH

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulting in a...

2026-09-30 NVD CVE

CVE-2026-100255: In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account HIGH

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset

2026-09-29 NVD CVE

CVE-2026-102827: simple-git, an interface for running git commands in any node.js application, en HIGH

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUnsafeOperationsPlugin compares parsed...

2026-09-29 NVD CVE

CVE-2026-102676: Electron is a framework for writing cross-platform desktop applications using Ja HIGH

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron <webview> guest could enable...

2026-09-28 NVD CVE

CVE-2026-102267: PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, P HIGH

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not revalidated against the JWKS trust boundary. This occurs when a...

2026-09-28 NVD CVE

CVE-2026-102266: PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until HIGH

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.from_jwk is affected because PyJWK verification path used the decoded key without applying prepare_key validation....

2026-09-22 NVD CVE

CVE-2026-65118: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att HIGH

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data...

2026-09-22 NVD CVE

CVE-2026-65114: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att HIGH

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to data...

2026-09-22 NVD CVE

CVE-2026-17618: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot HIGH

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.

2026-09-22 NVD CVE

CVE-2026-65130: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att HIGH

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial...

2026-09-22 NVD CVE

CVE-2026-65121: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an at HIGH

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A successful exploit of this vulnerability might lead to escalation of privileges,...

2026-09-18 NVD CVE

CVE-2026-57228: Suricata is a network Intrusion Detection System, Intrusion Prevention System an HIGH

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can...

2026-09-18 NVD CVE

CVE-2026-10027: IBM MQ could allow a remote attacker to cause a denial of service or execute arb HIGH

IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malformed compressed data on channels configured with compression enabled.

2026-09-17 NVD CVE

CVE-2026-81478: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use HIGH

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

2026-09-17 NVD CVE

CVE-2026-81475: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Mis HIGH

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

2026-09-17 NVD CVE

CVE-2026-81440: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use HIGH

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...

2026-09-17 NVD CVE

CVE-2026-81476: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Im HIGH

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with...

2026-09-16 NVD CVE

CVE-2025-43936: Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Au HIGH

Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to...

2026-09-15 NVD CVE

CVE-2026-81240: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestric HIGH

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

2026-09-15 NVD CVE

CVE-2026-81236: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestric HIGH

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this...