CVE ID :CVE-2026-85457 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to…
CVE-2026-82110 – DataStage on Cloud Pak for Data Path Traversal
CVE ID :CVE-2026-82110 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code…
CVE-2026-82108 – DataStage on Cloud Pak for Data Code Injection
CVE ID :CVE-2026-82108 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code…
CVE-2026-82103 – DataStage on Cloud Pak for Data Information Disclosure
CVE ID :CVE-2026-82103 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information…
CVE-2026-108963 – Databasement Argument Injection Remote Code Execution
CVE ID :CVE-2026-108963 Published : Oct. 11, 2026, 8:16 p.m. | 3 hours, 14 minutes ago Description :databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database…
CVE-2026-108905 – pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header
CVE ID :CVE-2026-108905 Published : Oct. 11, 2026, 3:16 p.m. | 8 hours, 13 minutes ago Description :pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows…
CVE-2026-108902 – pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link
CVE ID :CVE-2026-108902 Published : Oct. 11, 2026, 3:16 p.m. | 8 hours, 13 minutes ago Description :pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto()…
CVE-2026-108865 – AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypass via /authorize
CVE ID :CVE-2026-108865 Published : Oct. 11, 2026, 2:17 p.m. | 9 hours, 13 minutes ago Description :AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access…
CVE-2026-108863 – Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface
CVE ID :CVE-2026-108863 Published : Oct. 11, 2026, 2:17 p.m. | 9 hours, 13 minutes ago Description :Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the…
CVE-2026-108657 – JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply
CVE ID :CVE-2026-108657 Published : Oct. 10, 2026, 10:16 p.m. | 1 hour, 13 minutes ago Description :JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated…