Base de données CVE

CVE-2026-82110 Critique · 9.9 ibm · datastage_on_cloud_pak_for_data · 12/10/2026

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.

CVE-2026-82101 Critique · 9.6 ibm · datastage_on_cloud_pak_for_data · 12/10/2026

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.

CVE-2026-19622 Critique · 9.8 ibm · planning_analytics · 12/10/2026

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.

CVE-2026-109566 Critique · 9.3 · 12/10/2026

Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with passwo...

CVE-2026-109422 Critique · 9.2 · 12/10/2026

NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplie...

CVE-2026-108107 Critique · 9.3 · 09/10/2026

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() queries. Attackers can send crafted use...

CVE-2026-76779 Critique · 9.8 dell · policy_manager_for_secure_connect_gateway · 09/10/2026

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could po...

CVE-2026-84246 Critique · 9.8 ibm · guardium_data_protection · 08/10/2026

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

CVE-2026-84209 Critique · 9.8 ibm · guardium_data_protection · 08/10/2026

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

CVE-2026-84198 Critique · 9.8 ibm · guardium_data_protection · 08/10/2026

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

CVE-2026-84058 Critique · 9.8 ibm · guardium_data_protection · 08/10/2026

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a n...

CVE-2026-84057 Critique · 9.8 ibm · guardium_data_protection · 08/10/2026

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVE-2026-84035 Critique · 9.8 ibm · guardium_data_protection · 08/10/2026

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

CVE-2026-82900 Critique · 9.1 ibm · guardium_data_protection · 08/10/2026

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.

CVE-2026-82895 Critique · 9.8 ibm · guardium_data_protection · 08/10/2026

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

CVE-2026-81932 Critique · 9.8 ibm · guardium_data_protection · 08/10/2026

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or del...

CVE-2026-82344 Critique · 9.8 ibm · guardium_data_protection · 08/10/2026

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments th...

CVE-2026-82335 Critique · 9.8 ibm · guardium_data_protection · 08/10/2026

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive...

CVE-2026-82334 Critique · 9.1 ibm · guardium_data_protection · 08/10/2026

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid off...

CVE-2026-14988 Critique · 9.8 ibm · datapower_gateway · 08/10/2026

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to buffer overflow.

CVE-2026-14888 Critique · 9.8 ibm · datapower_gateway · 08/10/2026

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overfl...

CVE-2026-14508 Critique · 9.1 ibm · datapower_gateway · 08/10/2026

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service and obtain sensitive informati...

CVE-2026-76285 Critique · 9.8 splunk · splunk · 07/10/2026

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple...

CVE-2026-76459 Critique · 9.8 · 07/10/2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening relea...

CVE-2026-76454 Critique · 9.1 · 07/10/2026

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to...

Sources : NVD (NIST), CISA KEV, FIRST EPSS. Dernière mise à jour : 22/10/2026 16:55. Les analyses en français sont générées par IA et peuvent contenir des erreurs : vérifiez toujours l'avis de l'éditeur.