Vulnerabilities
DecJanFebMarAprMayJunJulAugSepOctNov
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
CyStack continuously tracks the latest global threats and develops solutions that help identify new vulnerabilities across your websites and systems.
Data is updated in the system
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Data is updated in the CyStack VulnScan system.Learn more
CVE-2026-76052The following vulnerabilities that can affect IBM Storage Scale and IBM Storage Scale System and the Management GUI are now fixed in 5.2.3.9/6.2.3.7 or higher and 6.0.1.1/7.0.1.1 or higherCVE-2026-14469IBM Storage Scale Incorrect AuthorizationCVE-2026-14437IBM Storage Scale Path TraversalCVE-2026-14435IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by a vulnerabilityCVE-2026-14434IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by vulnerability| Vulnerability | Exploitation status | Fix | Provider | Affected product | Published | Severity |
|---|---|---|---|---|---|---|
CVE-2026-76052The following vulnerabilities that can affect IBM Storage Scale and IBM Storage Scale System and the Management GUI are now fixed in 5.2.3.9/6.2.3.7 or higher and 6.0.1.1/7.0.1.1 or higher | Exploitation statusNot confirmed | Fix |
| ProviderIBM |
| Affected productStorage Scale |
| Published11/08/2026 |
| SeverityMedium |
CVE-2026-14469IBM Storage Scale Incorrect Authorization | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productStorage Scale Container Native and CSI | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-14437IBM Storage Scale Path Traversal | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productStorage Scale Container Native and CSI | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-14435IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by a vulnerability | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productTurbonomic kubeturbo agent | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-14434IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by vulnerability | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productTurbonomic kubeturbo agent | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-14377IBM Turbonomic kubeturbo agent, used by IBM Turbonomic Application Resource Management, is affected by a security vulnerability | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productTurbonomic kubeturbo agent | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-14375The following vulnerabilities that can affect IBM Storage Scale Install Toolkit are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productStorage Scale | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-12737IBM Sterling B2B Integrator and IBM Sterling File Gateway affected by Exposure of Sensitive Information in Logs Vulnerability | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productSterling B2B Integrator | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-12735IBM Controller Disclosure Management has addressed vulnerabilities | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productController Disclosure Management | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-120115Multiple vulnerabilities in IBM Aspera Connect | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productAspera Connect | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-120113Multiple vulnerabilities in IBM Aspera Connect | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productAspera Connect | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-119670Vulnerabilities in spring-context, logback-core and Another JSON Schema Validator might affect IBM Storage Defender Copy Data Management | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productStorage Copy Data Management | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-117545IBM webMethods Integration Server is vulnerable of bypassing the two-factor authentication mechanism. | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productwebMethods Integration Server | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-116501Qiskit SDK C API may trigger an out of bounds write on accessing the unitary matrix with qk_circuit_inst_unitary(). | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productQiskit SDK | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-116500Unbound Recursion in QPY deserialization can lead to denial of service | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productQiskit SDK | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-116499Arbitrary Code Execution in Qiskit SDK QPY Deserialization | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productQiskit SDK | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-115554Tivoli Netcool/OMNIbus Web GUI is vulnerable to stored cross-site scripting | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productTivoli Netcool/OMNIbus | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-11547IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productWebSphere Application Server - Liberty | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-114464Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026 | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productProcess Mining | Published11/08/2026 | SeverityCritical |
|---|
CVE-2026-113698IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productDb2 | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-112369Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026 | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productProcess Mining | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-110273Security Vulnerability identified in IBM TRIRIGA - Command Execution | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productTRIRIGA Application Platform | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-10844IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productWebSphere Application Server - Liberty | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-108292Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026 | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productProcess Mining | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-108284IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productWebSphere Application Server - Liberty | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-107331DataStage on Cloud Pak for Data has several vulnerabilities | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productDataStage on Cloud Pak for Data | Published11/08/2026 | SeverityCritical |
|---|
CVE-2026-107330DataStage on Cloud Pak for Data has several vulnerabilities | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productDataStage on Cloud Pak for Data | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-105473IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productQRadar | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-105467IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productQRadar | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-103320IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productWebSphere Application Server - Liberty | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-102618IBM i is Affected by a Protection Mechanism Failure | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected producti | Published11/08/2026 | SeverityLow |
|---|
CVE-2026-101117IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks. | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productWebSphere Extreme Scale | Published11/08/2026 | SeverityCritical |
|---|
CVE-2025-36075IBM Safer Payments could allow an authenticated user to obtain sensitive information | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productSafer Payments | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-61987WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.8.1 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | ProviderWC Lovers | Affected productWCFM – Frontend Manager for WooCommerce | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-114186WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | ProviderWPVibes | Affected productAnyWhere Elementor | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-114189WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerability | Exploitation statusNot exploited | FixYes | ProviderWPVibes | Affected productAnyWhere Elementor | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-109900WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability | Exploitation statusNot exploited | FixYes | ProviderMelapress | Affected productMelapress Role Editor | Published11/08/2026 | SeverityCritical |
|---|
CVE-2026-120858WordPress FluentForm plugin <= 6.2.16 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | ProviderWP ManageNinja LLC | Affected productFluentForm | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-109899WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | ProviderMelapress | Affected productMelapress Role Editor | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-114188WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | ProviderWPVibes | Affected productAnyWhere Elementor | Published11/08/2026 | SeverityMedium |
|---|
CVE-2025-1837Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productwatsonx Orchestrate Cartridge for Cloud Pak for Data | Published11/08/2026 | SeverityMedium |
|---|
CVE-2025-0166Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productwatsonx Orchestrate Cartridge for Cloud Pak for Data | Published11/08/2026 | SeverityLow |
|---|
CVE-2024-41786IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure Rule | Exploitation statusNot confirmed | FixYes | ProviderIBM | Affected productEngineering Requirements Management DOORS Next | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-124553BabelDOC from 0.3.61 before 0.7.0 Denial of Service via ToUnicode CMap Parsing | Exploitation statusNot confirmed | FixYes | Providerfunstory-ai | Affected productBabelDOC | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-124552Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi | Exploitation statusNot confirmed | FixYes | Providerwebmin | Affected productwebmin | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-124551ClassroomIO through 1.0.0 Cross-Organization Course Disclosure via Clone Endpoint | Exploitation statusNot confirmed | FixYes | Providerclassroomio | Affected productclassroomio | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-124474MRBS before 1.12.3 Reflected XSS via error parameter of view_entry.php | Exploitation statusNot confirmed | FixYes | Providermeeting-room-booking-system | Affected productmrbs-code | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-124465Trendyol kafka-konsumer 2.3.3 before 2.6.18 Denial of Service via Batch Consumer Panic | Exploitation statusNot confirmed | FixYes | ProviderTrendyol | Affected productkafka-konsumer | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-124331Jinher OA ProjectAfficheManage.aspx sql injection | Exploitation statusActively exploited | FixNo | ProviderJinher | Affected productOA | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-124494SunEditor before 3.4.0 Stored XSS via : Entity Sanitizer Bypass | Exploitation statusNot confirmed | FixYes | Providerjihong88 | Affected productsuneditor | Published11/08/2026 | SeverityCritical |
|---|
421,264 Results | Page 2 of 8,426
