Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102917 | high | 7.8 | No | IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerabil... | 2026-10-23 |
| CVE-2026-107674 | medium | 4.4 | No | IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications att... | 2026-10-23 |
| CVE-2026-17068 | low | 3.3 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export versi... | 2026-10-23 |
| CVE-2026-17073 | medium | 5.5 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle r... | 2026-10-23 |
| CVE-2026-17275 | medium | 5.3 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper... | 2026-10-23 |
| CVE-2026-17488 | medium | 6.5 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication. | 2026-10-23 |
| CVE-2026-17491 | medium | 5.4 | No | IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of t... | 2026-10-23 |
| CVE-2026-10572 | high | 8.8 | No | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflo... | 2026-10-23 |
| CVE-2026-10574 | high | 8.8 | No | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflo... | 2026-10-23 |
| CVE-2026-10743 | high | 8.8 | No | IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQ... | 2026-10-23 |
| CVE-2026-11828 | medium | 5.9 | No | IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of ser... | 2026-10-23 |
| CVE-2026-57121 | high | 8.1 | No | PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanentl... | 2026-10-23 |
| CVE-2026-76307 | high | 7.2 | No | In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Representational State... | 2026-10-23 |
| CVE-2026-76303 | medium | 5.7 | No | In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-controlled content that... | 2026-10-23 |
| CVE-2026-57113 | high | 8.1 | No | PraisonAI is a multi-agent teams system. From version 2.6.0 to before version 4.6.59, PraisonAI's template loader accepts GitHub template UR... | 2026-10-23 |
| CVE-2026-115727 | high | 8.1 | No | AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while... | 2026-10-23 |
| CVE-2026-115723 | high | 7.4 | No | Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow... | 2026-10-23 |
| CVE-2026-115390 | medium | 5.7 | No | Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-compiled call_ref and try_table catch pa... | 2026-10-23 |
| CVE-2026-115386 | low | 2.6 | No | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure vulnerability in the WASIp1 fd_re... | 2026-10-23 |
| CVE-2026-115382 | medium | 4.8 | No | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http implementation that allow... | 2026-10-23 |