CVE-2026-55367 is a resource exhaustion vulnerability in the h2o HTTP server affecting deployments that enable proxy.connect-udp and accept CONNECT-UDP requests. A client can send an incomplete CONNECT-UDP Capsule with a large declared length, causing the server to buffer data without limits and potentially exhaust memory, leading to denial of service. The issue is fixed in commit 4212ce114506a073505fd389db16ad2ba4e582a0.
CVE-2026-55368 is a high-severity out-of-bounds write vulnerability in the h2o HTTP server's access-log formatter. The flaw occurs when certain custom access-log formats are configured, allowing writes past the log-line buffer. This can cause server crashes or potentially other undefined behavior due to a one-byte null byte overwrite. The vulnerability is fixed in a specific commit identified by the vendor.
CVE-2026-103002 is an authorization bypass vulnerability in GPUStack versions 2.2.0 through 2.2.1. The cluster_apiserver_proxy component forwarded authenticated non-administrator requests to Kubernetes clusters without proper resource-level authorization checks, using a worker's Kubernetes ServiceAccount credentials. This allowed attackers to read sensitive data, modify workloads, or delete resources within the permissions of that ServiceAccount. Exploitation requires a Kubernetes cluster with a reachable worker and attacker-controlled workloads, potentially leading to code execution. The issue is fixed in GPUStack version 2.2.2.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD store potentially sensitive information in log files accessible to local users. This exposure could lead to unauthorized disclosure of sensitive data.
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a vulnerability that allows a remote attacker to cause a denial of service via an out-of-bounds read.
Jan versions from 0.8.5 up to but not including 0.8.8 contain a vulnerability in the agent-tools gate.rs component that allows attackers to bypass workspace guards. This flaw enables writing files outside the intended workspace via dangling symlinks, potentially allowing attackers to create or modify sensitive files such as ~/.ssh/authorized_keys on the host system by supplying a malicious repository and using prompt injection.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD are vulnerable to an XML external entity (XXE) injection vulnerability. This flaw allows a remote attacker with low privileges to exploit XML processing to disclose sensitive information or cause memory resource consumption. The vulnerability has a high severity rating with a CVSS score of 7.1. No public exploits or patches are currently documented in the provided data.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD Managed File Transfer contain a vulnerability involving improper restriction of XML external entity (XXE) references during command queue processing. This flaw could allow an authenticated attacker to access sensitive information or cause a denial of service. The vulnerability is tracked as CVE-2026-13271 and has a high severity with a CVSS score of 8.1. No public exploits or patch information are provided in the data.
IBM MQ versions 9.4.0.0 through 9.4.0.26, 9.4.1.0 through 9.4.5.3, and 10.0.0.1 through 10.0.0.5 contain a vulnerability where improper validation of message header structure length fields could allow an authenticated attacker to obtain sensitive information or cause a denial of service.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD contain a vulnerability that allows an authenticated attacker to execute arbitrary code by injecting malicious environment variables through transfer request metadata.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD are vulnerable to an XML external entity (XXE) injection vulnerability. This flaw allows a remote attacker with limited privileges to exploit XML processing to expose sensitive information or cause memory resource consumption. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity. No public exploits or known exploitation in the wild have been reported. Patch status is not confirmed as no patch or remediation details are provided.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD contain a vulnerability that allows an authenticated user with command queue access to execute arbitrary code by injecting malicious arguments into Ant script commands. This vulnerability is tracked as CVE-2026-12356 and has a CVSS v3.1 base score of 7.5, indicating high severity.
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a vulnerability that allows a remote attacker to perform an out-of-bounds read, potentially exposing sensitive information. The flaw is identified as CWE-125 and has a medium severity rating with a CVSS score of 5.3. No public exploits or known active exploitation have been reported. No patch or remediation information is currently available.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD contain a vulnerability that allows a remote authenticated attacker to cause denial of service and limited memory corruption due to an integer overflow.
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a use-after-free vulnerability that could allow a remote attacker to execute arbitrary code. This vulnerability is critical with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a path traversal vulnerability that allows a remote authenticated attacker to read arbitrary files from the local filesystem. This vulnerability could expose sensitive information stored on the affected system.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD contain a vulnerability that allows an authenticated attacker to obtain sensitive information or cause a denial of service. This is due to improper validation of message selection parameters.
Powerlevel10k versions prior to 1.20.19 have a symlink following vulnerability in the _p9k_dump_instant_prompt function. This flaw allows local attackers to overwrite files writable by the victim by creating symlinks in a predictable temporary file path. The attack requires guessing the victim's shell process ID to pre-plant symlinks named p10k-instant-prompt-output-<user>-<pid> in the TMPDIR directory, causing the shell startup to truncate and overwrite the targeted files.
Mistral Vibe versions before 3.0.3 have a remote code execution vulnerability. This flaw allows attackers to execute arbitrary commands by exploiting the repository-configured gpg.program during project context collection. Specifically, a crafted repository setting for gpg.program combined with log.showSignature and a signed commit causes git log to run the attacker's program at session start, before any trust prompt appears.
Powerlevel10k versions before 1.20.19 have a vulnerability in the bundled gitstatus/install script where an insecure temporary directory is reused if mktemp fails. Local attackers can exploit this by pre-creating a predictable temporary directory named gitstatus-install.tmp, allowing them to replace the extracted gitstatusd binary. This malicious binary then executes with the victim's privileges, potentially leading to privilege escalation.