Threat database

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code. This vulnerability is identified as CVE-2026-82895 and has a high severity rating with a CVSS score of 8.1. The flaw requires high attack complexity and no privileges or user interaction, indicating a remote attack vector. No patch or remediation details are currently provided.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a stack-based buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code. This vulnerability is identified as CVE-2026-84035 and has a high severity rating with a CVSS score of 8.1. The flaw requires network access with high attack complexity and no privileges or user interaction. Exploitation could result in full confidentiality, integrity, and availability impact.

A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows attackers to bypass authentication due to a hard coded cryptographic key. This flaw affects all deployments using vulnerable versions and can lead to full compromise of confidentiality, integrity, and availability. The vulnerability has a high severity with a CVSS score of 8.8.

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0 by supplying an unauthorized Certificate Authority certificate to an unauthenticated management interface. This modification can cause the system to trust unauthorized certificates, potentially enabling Man-in-the-Middle attacks against outbound communications with managed switches and peer nodes.

A vulnerability in Brocade ASCG versions before 3.5.0 allows attackers to extract a static cryptographic key hardcoded in the software. This key protects sensitive data at rest and secures inter-node communication. Exploiting this flaw enables decryption of stored management credentials and forging of administrative synchronization messages.

A critical vulnerability in Brocade ASCG versions before 3.5.0 allows unauthenticated attackers with network access to bypass authentication and access controls on the HTTPS service. This enables them to issue control commands, alter cluster states, and modify system configurations, potentially leading to a full compromise of the streaming service control plane.

A path traversal vulnerability in the HTTP service component of Brocade ASCG versions before 3.5.0 allows an unauthenticated attacker on the local network to bypass path restrictions and perform arbitrary file read, write, or deletion operations.

A vulnerability in the data collection service of Brocade ASCG versions before 3.5.0 allows unauthenticated attackers with network access to execute arbitrary system commands via an API endpoint that lacks authentication and authorization checks. This can enable the appliance to be used as an unauthenticated proxy or execution vector.

Bouncy Castle for Java versions before 1.86 contain a vulnerability in their MLS implementation where a 32-bit unsigned leaf index is incorrectly handled as a signed integer. This causes certain out-of-range sender values to bypass membership checks, enabling a denial of service via heap exhaustion. The issue is fixed by interpreting the leaf index as unsigned, rejecting invalid values.

A DOM Cross-Site Scripting (XSS) vulnerability exists in the FreeIPA/IdM Web UI password reset page. An unauthenticated remote attacker can exploit this by tricking a user into clicking a crafted link and completing a password reset, leading to arbitrary JavaScript execution within the victim's session. This can result in actions performed with the victim's privileges, potentially full administrative control if an IdM administrator is targeted. Red Hat has issued a security advisory with a critical update addressing this vulnerability.

A vulnerability in FreeIPA's idp-add command allows insufficiently validated input to reach an eval() call before LDAP access control checks. This flaw enables any authenticated IPA principal to enumerate and read environment variables of the server process and cause denial of service via memory exhaustion. The issue affects FreeIPA and has a high severity rating with a CVSS score of 8.1. Red Hat has issued a security advisory with a critical impact rating and released patches to address this vulnerability.

A critical vulnerability (CVE-2026-76578) was found in FreeIPA where the self-managed OTP token Access Control Instruction (ACI) does not require authentication and does not restrict attribute additions. This flaw allows an unauthenticated LDAP client to create an arbitrary Kerberos principal and add it to the administrators group, gaining administrative privileges remotely. The issue is compounded by a related flaw in the underlying directory server's ACI evaluation. Red Hat has issued a security advisory with a patch to fix this vulnerability.

The npm package babel-polyfill-plugin-corejs2 version 1.0.1 contains malicious code disguised as a Babel core-js 2 polyfill plugin. Instead of the advertised functionality, it executes a large obfuscated JavaScript payload at import time, which may compromise the host system. The package should be considered fully malicious, and any system with it installed is likely compromised.

CVE-2024-3220 is a low-severity vulnerability in the CPython standard library module mimetypes affecting Windows platforms. The issue arises because mimetypes uses default file locations that are writable by users on Windows, allowing creation of invalid files that can cause a MemoryError during Python startup or incorrect file type interpretation. This occurs because locations typical for Linux/macOS are also used on Windows, where they are user-writable. A workaround is to call mimetypes.init() with an empty list on Windows to avoid using these default locations.