Latest CVE Vulnerabilities by Published Date – Page 8

7.1 HIGH

CVE-2026-12667 — IBM MQ .NET client is vulnerable to XML external entity injection

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 cou…

mq | Remote | XML External Entity

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

8.1 HIGH

CVE-2026-12666 — IBM MQ Java messaging is vulnerable to XML external entity injection

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 Cla…

mq | Remote | XML External Entity

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

7.5 HIGH

CVE-2026-12358 — Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Securi…

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

security_verify_access verify_identity_access verify_identity_access_container security_verify_access_container | Remote | Denial of Service

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

8.1 HIGH

CVE-2026-12355 — IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 cou…

mq | Remote | Injection

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

7.5 HIGH

CVE-2026-12354 — IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution vi…

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 cou…

mq | Remote | Misconfiguration

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

9.8 CRITICAL

CVE-2026-12351 — IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection

IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 LTS, and 10.0.0.0 could allow a remote attacker to execute arbitrary code due to…

mq | Remote | Misconfiguration

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

7.0 HIGH

CVE-2026-12150 — IBM MQ queue manager is vulnerable to denial of service

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 cou…

mq | Remote | Denial of Service

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

0.0 NA

CVE-2026-12101 — Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Securi…

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests.

security_verify_access verify_identity_access verify_identity_access_container security_verify_access_container | Authorization

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

0.0 NA

CVE-2026-11934 — Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Securi…

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input.

security_verify_access verify_identity_access verify_identity_access_container security_verify_access_container | Authorization

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

0.0 NA

CVE-2026-11929 — Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Securi…

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.

security_verify_access verify_identity_access verify_identity_access_container security_verify_access_container | Cryptography

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

0.0 NA

CVE-2026-11928 — Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Securi…

IBM Verify Identity Access is vulnerable to a buffer overflow attack.

security_verify_access verify_identity_access verify_identity_access_container security_verify_access_container | Memory Corruption

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

0.0 NA

CVE-2026-11927 — Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Securi…

IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services.

security_verify_access verify_identity_access verify_identity_access_container security_verify_access_container | Injection

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

7.5 HIGH

CVE-2026-11926 — Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Securi…

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

security_verify_access verify_identity_access verify_identity_access_container security_verify_access_container | Remote | Denial of Service

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

0.0 NA

CVE-2026-11921 — Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Securi…

IBM Verify Identity Access containers may not apply management password change operations correctly.

security_verify_access verify_identity_access verify_identity_access_container security_verify_access_container | Authentication

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

5.4 MEDIUM

CVE-2026-11918 — IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload str…

IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content.

contextforge_mcp_gateway | Remote | Authorization

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

6.5 MEDIUM

CVE-2026-11864 — Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automatio…

IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and 24.0.0 through 24.0.0 Interim Fix 009 is…

cloud_pak_for_business_automation | Remote | Injection

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

8.5 HIGH

CVE-2026-11729 — IBM MQ Java messaging is vulnerable to remote code execution

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 cou…

mq | Remote | Injection

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

8.1 HIGH

CVE-2026-11728 — IBM MQ .NET client is vulnerable to remote code execution

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 cou…

mq | Remote | Memory Corruption

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

0.0 NA

CVE-2025-66974 — Prolink Smart Plug Denial of Service and Connection Hijacking Vulnerability

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service (DoS) or connection to an attacker-controlled d…

| Denial of Service

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

6.3 MEDIUM

CVE-2026-73451 — On affected platforms running Arista EOS with dual switch cards and with ingress Security…

On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard f…

eos | Remote | Misconfiguration

Sep 15, 2026 Sep 15, 2026

Sep 15, 2026

Browse by Apps

Latest CVE Feed

Cookie Preferences