Security Vulnerabilities
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path traversal.
CVSS Score
9.3
EPSS Score
0.006
Published
2026-08-14
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments.
CVSS Score
9.8
EPSS Score
0.008
Published
2026-08-14
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input.
CVSS Score
8.8
EPSS Score
0.005
Published
2026-08-14
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication.
CVSS Score
5.3
EPSS Score
0.005
Published
2026-08-14
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation.
CVSS Score
7.5
EPSS Score
0.009
Published
2026-08-14
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVSS Score
8.3
EPSS Score
0.005
Published
2026-08-14
An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope.
CVSS Score
5.3
EPSS Score
0.003
Published
2026-08-14
An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue.
CVSS Score
8.7
EPSS Score
0.016
Published
2026-08-14
A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database.
CVSS Score
7.1
EPSS Score
0.003
Published
2026-08-14
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.
CVSS Score
9.4
EPSS Score
0.022
Published
2026-08-14