Threat database

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code. The vulnerability is due to improper size checking during buffer copy operations. It has a high severity with a CVSS score of 8.1. No patch or remediation details are provided in the available data.

IBM Guardium Data Protection versions 12.2.2 and 12.1 contain a SQL injection vulnerability due to improper neutralization of special elements in SQL commands. This flaw could allow a remote attacker to execute arbitrary SQL commands on the affected systems without authentication. The vulnerability has a high severity rating with a CVSS score of 8.1. No information about available patches or vendor advisories is provided.

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code. The vulnerability is due to improper handling of input size during buffer copy operations.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.

IBM Guardium Data Protection versions 12.2 and 12.2.2 contain a critical vulnerability (CVE-2026-84249) due to missing authentication for a critical function. This flaw allows a remote attacker to execute arbitrary management operations without authentication. The vulnerability has a CVSS 3.1 score of 9.8, indicating a critical severity with high impact on confidentiality, integrity, and availability.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability that could allow a remote attacker with low privileges to execute arbitrary code. The vulnerability is classified as CWE-119 and has a CVSS 3.1 score of 7.5, indicating high severity. No patch or remediation information is provided in the available data.

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs.

The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize applies no origin trust boundary in Mechanize::HTTP::Agent#response_follow_meta_refresh when Mechanize#follow_meta_refresh is enabled. A page containing a meta refresh to another origin causes headers configured through Mechanize#request_headers= to be reapplied to the refresh request, allowing an attacker who controls content in the crawl to capture bearer tokens or session cookies. The default configuration is not affected because follow_meta_refresh is false, and the exposure is limited to caller-supplied default headers. This issue is fixed in version 2.14.1.

Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application.

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could access file paths outside the intended directory and use observable application responses to determine whether files exist on the host system.

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements:   * For the following versions: Applicable only when configured as a SAML IdP: * NetScaler ADC and NetScaler Gateway between 14.1-73.37 and 14.1-73.41, inclusive * NetScaler ADC 14.1-FIPS between 14.1-73.37 FIPS and 14.1-73.41 FIPS, inclusive * NetScaler ADC and NetScaler Gateway between 13.1-64.23 and 13.1-64.28, inclusive * NetScaler ADC 13.1-FIPS between 13.1-NDcPP 13.1-37.279 and 13.1- 37.282, inclusive   For the following versions: Applicable only when configured as a SAML SP or SAML IdP: * NetScaler ADC and NetScaler Gateway before 14.1-73.37  * NetScaler ADC 14.1-FIPS before 14.1-73.37 FIPS  * NetScaler ADC and NetScaler Gateway before 13.1-64.23 * NetScaler ADC 13.1-FIPS before13.1-NDcPP 13.1-37.279

CVE-2026-106435 is a medium severity vulnerability in the MongoDB Python Driver's binary accelerator. It involves an out-of-bounds read when decoding malformed BSON with a truncated regular-expression element lacking a trailing NUL byte. This can cause the application process to terminate if the C extension is loaded. The vulnerability is triggered only via the documented decode or decode_all API and does not affect the normal database wire-protocol path.

DeskIn versions up to 3.3.4.3 have a privilege escalation vulnerability in the com.deskin.service.installer XPC service. This flaw allows local unprivileged users to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Exploiting this vulnerability can lead to full root compromise of the affected macOS host.

Satel Netco Design versions prior to 2.1.7 contain a relative path traversal vulnerability in the data export functionality. An authenticated user with Viewer privileges can exploit this flaw to write attacker-controlled content to file system locations accessible by the application. This may lead to unauthorized file creation or modification and, under certain conditions, arbitrary code execution. The vulnerability has a high severity with a CVSS score of 8.7. No official patch links are provided in the input data.

CVE-2026-11888 is a medium severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access. It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The vulnerability involves improper control of code generation, classified as CWE-94, which can lead to information disclosure. The CVSS 3.1 base score is 6.4, indicating a moderate risk with network attack vector, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or remediation details are provided in the available data. There are no known exploits in the wild at this time.

CVE-2026-11930 is an authorization vulnerability in IBM Security Verify Access and IBM Verify Identity Access. Versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3 may not correctly enforce authorization for some web servers, potentially allowing unauthorized actions. The vulnerability has a medium severity rating and a CVSS score of 5.9.

CVE-2026-11939 is a low-severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access that may allow audit log forgery due to improper neutralization of argument delimiters (CWE-88). It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The vulnerability does not impact confidentiality or availability but can affect the integrity of audit logs.

CVE-2026-16823 is a critical improper authentication vulnerability in IBM Security Verify Access and IBM Verify Identity Access. Versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3 are affected. This flaw could allow a remote attacker to bypass security restrictions without authentication, potentially leading to full confidentiality and integrity compromise. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.