CVE-2026-11724 is a high-severity vulnerability in IBM MQ affecting versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD. It involves improper input validation of metadata during script execution on a Managed File Transfer agent host, which could allow an authenticated attacker to execute arbitrary code. The vulnerability has a CVSS 3.1 score of 8.5, indicating high impact on confidentiality, integrity, and availability.
CVE-2026-12356 is a high-severity vulnerability in IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD. It allows an authenticated user with command queue access to execute arbitrary code by injecting malicious arguments into Ant script commands.
CVE-2026-12538 is a buffer underrun vulnerability in IBM MQ Appliance versions 9.4.0.0 through 9.4.0.26, 9.4.1.0 through 9.4.5.3, and 10.0.0.1 through 10.0.0.5. It allows an authenticated attacker to obtain sensitive information or cause a denial of service by exploiting improper validation of message header structure length fields.
CVE-2026-12550 is a heap-based buffer overflow vulnerability in IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD. This flaw arises from improper validation of message selection parameters and could allow an authenticated attacker to obtain sensitive information or cause a denial of service. The vulnerability has a medium severity rating with a CVSS score of 5.4.
CVE-2026-13271 is a high-severity vulnerability in IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD Managed File Transfer. It involves improper restriction of XML external entity (XXE) references in command queue processing, which could allow an authenticated attacker to obtain sensitive information or cause a denial of service. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity.
CVE-2026-13284 is an XML External Entity (XXE) injection vulnerability affecting IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD. This vulnerability allows a remote attacker with low privileges to exploit improper restriction of XML external entity references when processing XML data. Successful exploitation could lead to exposure of sensitive information or memory resource consumption.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD are vulnerable to an XML External Entity (XXE) injection vulnerability. This flaw allows a remote attacker with limited privileges to exploit the XML processing functionality to expose sensitive information or cause memory resource consumption. The vulnerability is identified as CWE-611 and has a CVSS 3.1 base score of 7.1, indicating high severity.
CVE-2026-13292 is a high-severity vulnerability in IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD. It allows an authenticated attacker to execute arbitrary code by injecting malicious environment variables via transfer request metadata. The vulnerability is related to external control of system or configuration settings (CWE-15).
CVE-2026-14252 is a vulnerability in IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD. It involves the insertion of potentially sensitive information into log files, which could be accessed by a local user. The vulnerability has a CVSS 3.1 base score of 6.2, indicating a medium severity level.
CVE-2026-18142 is an integer overflow vulnerability in IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD. This flaw could allow a remote authenticated attacker to cause a denial of service and limited memory corruption. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity. No public exploits or patches are currently documented.
CVE-2026-122220 is an authentication bypass vulnerability in the WPO365 | LOGIN WordPress plugin before version 45.2. The flaw is due to a logic error in the anti-replay mechanism for SAML responses, allowing attackers to replay a captured valid SAMLResponse to log in as any user, including administrators, without detection. This occurs because the plugin fails to persist processed SAML message IDs, disabling duplicate message detection.
Sonatype Nexus Repository 3 versions from 3.0.0 up to but not including 3.98.0 contain a missing authorization vulnerability. A user with valid credentials and the add or edit privilege on a group repository can add a repository they are not authorized to access as a member of that group, thereby gaining unauthorized read access to its content. Anonymous users can exploit this only if explicitly granted the necessary privilege by an administrator. This issue is fixed in version 3.98.0.
CVE-2026-113369 is a cross-site scripting (XSS) vulnerability in Sonatype Nexus Repository 3. It affects versions from 3.94.0 up to but not including 3.98.0. A user with edit permissions on a hosted OCI repository can inject script content into the artifact type field of an OCI manifest. This script executes in the browser of any user who views the Attestations tab for the related image, running with the permissions of the viewing user. The vulnerability has a medium severity with a CVSS 4.0 score of 6.3. It was fixed in version 3.98.0.
Sonatype Nexus Repository 3 versions 3.90.0 through 3.97.x contain a SQL injection vulnerability in the optional 'Reindex Search Tables By Pattern' task. This task is only available if the non-default setting nexus.reindex.search.by.pattern.visible is enabled. A user with the nexus:tasks:create privilege can supply a crafted filter condition that is executed as SQL by the database, allowing modification of Nexus database data. The vulnerability is fixed in version 3.98.0.
Sonatype Nexus Repository 3 versions 3.93.0 through 3.97.x contain a vulnerability where the signing passphrase for APT or YUM repositories is exposed via an internal REST endpoint. This endpoint returns the passphrase to user accounts with only read privileges, which do not require editing rights. This exposure can lead to unauthorized access to sensitive credentials.
Sonatype Nexus Repository 3 versions 3.93.0 through 3.97.x have a vulnerability where an account with only read privileges on a YUM proxy or group repository can obtain the private signing key. This key allows signing of repository metadata, which should require higher privileges. The issue is fixed in version 3.98.0.
Sonatype Nexus Repository 3 Pro versions from 3.86.0 up to but not including 3.98.0 contain a critical authentication vulnerability. The product does not verify the local account status when users authenticate via configured SAML or OAuth2/OpenID Connect identity providers. This allows users whose Nexus accounts have been disabled or locked by an administrator to sign in again using valid identity provider credentials and regain access with their original roles. The vulnerability requires a valid identity provider account and does not affect anonymous users.
Sonatype Nexus Repository 3 versions from 3.0.0 up to but not including 3.98.0 contain a missing authorization vulnerability (CWE-862). This flaw allows a user with only the capability creation permission to create a Rut Auth capability, enabling header-based authentication. Consequently, a remote client can authenticate as any existing user, including administrators, without providing credentials. This vulnerability has a high severity score of 8.6 and is fixed in version 3.98.0.
The npm package @pubngo-stack/help-browser version 12.0.23-alpha.3 contains malicious code that fully compromises any computer on which it is installed or run. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package and rotation of all secrets and keys from a different, secure computer is strongly advised. However, removal of the package alone may not eliminate all malicious software introduced by the compromise.
The npm package @cdmbase/wiki-browser version 12.0.18-alpha.53 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different device. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have gained full control of the system.