Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82967 | critical | 9.8 | No | IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-base... | 2026-10-06 |
| CVE-2026-82896 | high | 7.6 | No | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due to a path traversal... | 2026-10-06 |
| CVE-2026-82893 | high | 7.8 | No | IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management. | 2026-10-06 |
| CVE-2026-82892 | high | 8.1 | No | IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elem... | 2026-10-06 |
| CVE-2026-82890 | medium | 5.9 | No | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutraliz... | 2026-10-06 |
| CVE-2026-82887 | high | 8.8 | No | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization o... | 2026-10-06 |
| CVE-2026-82885 | high | 8.8 | No | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing authorization in th... | 2026-10-06 |
| CVE-2026-81447 | medium | 6.8 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthentica... | 2026-10-06 |
| CVE-2026-16428 | high | 8.8 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary code due to impro... | 2026-10-06 |
| CVE-2026-25262 | medium | 6.3 | No | Memory corruption while processing a crafted ELF file in the Primary Bootloader. | 2026-10-06 |
| CVE-2026-25255 | high | 7.8 | No | Exposed dangerous function lead to privilege escalation via gRPC server. | 2026-10-06 |
| CVE-2026-73547 | high | 7.5 | No | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's... | 2026-10-06 |
| CVE-2026-84076 | high | 7.6 | No | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization. | 2026-10-06 |
| CVE-2026-84077 | high | 8.1 | No | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerab... | 2026-10-06 |
| CVE-2026-16432 | medium | 6.5 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitiv... | 2026-10-06 |
| CVE-2026-84078 | critical | 9.9 | No | IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated use... | 2026-10-06 |
| CVE-2026-84081 | high | 8.1 | No | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation. | 2026-10-06 |
| CVE-2026-84082 | critical | 9.8 | No | IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special... | 2026-10-06 |
| CVE-2026-84083 | high | 7.8 | No | IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector applian... | 2026-10-06 |
| CVE-2026-84084 | high | 8.8 | No | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery (CSRF) v... | 2026-10-06 |