CVE ID :CVE-2026-90444 Published : Sept. 11, 2026, 10:16 p.m. | 2 hours, 44 minutes ago Description :A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters. An automated process…
CVE-2026-44715 – OpenMRS has Broken Access Control in HL7 Configuration
CVE ID :CVE-2026-44715 Published : Sept. 11, 2026, 10:16 p.m. | 2 hours, 44 minutes ago Description :OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an…
CVE-2026-16174 – Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow
CVE ID :CVE-2026-16174 Published : Sept. 10, 2026, 11:16 p.m. | 1 hour, 43 minutes ago Description :Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful…
CVE-2026-87958 – IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions
CVE ID :CVE-2026-87958 Published : Sept. 10, 2026, 10:17 p.m. | 2 hours, 43 minutes ago Description :IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where…
CVE-2026-84889 – A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem
CVE ID :CVE-2026-84889 Published : Sept. 10, 2026, 10:17 p.m. | 2 hours, 43 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due…
CVE-2026-82107 – DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE ID :CVE-2026-82107 Published : Sept. 10, 2026, 10:17 p.m. | 2 hours, 43 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive…
CVE-2026-82100 – DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE ID :CVE-2026-82100 Published : Sept. 10, 2026, 10:17 p.m. | 2 hours, 43 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a…
CVE-2026-87931 – Behavioral Technology Group Pavlok Behavioral Conditioning Wearable Apple Notification Center Service Event buffer overflow
CVE ID :CVE-2026-87931 Published : Sept. 10, 2026, 12:17 a.m. | 42 minutes ago Description :A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is…
CVE-2026-88069 – Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis
CVE ID :CVE-2026-88069 Published : Sept. 9, 2026, 10:18 p.m. | 2 hours, 41 minutes ago Description :Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive…
CVE-2026-87995 – Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin
CVE ID :CVE-2026-87995 Published : Sept. 9, 2026, 10:18 p.m. | 2 hours, 41 minutes ago Description :Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.11 until 0.11.1, src/lib/components/chat/FileNav/PortPreview.svelte rendered…