Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-16346 | critical | 9.9 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutra... | 2026-10-06 |
| CVE-2026-84075 | critical | 9.9 | No | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the Change... | 2026-10-06 |
| CVE-2026-84074 | high | 8.9 | No | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of in... | 2026-10-06 |
| CVE-2026-84073 | critical | 9.1 | No | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralizati... | 2026-10-06 |
| CVE-2026-84071 | high | 7.2 | No | IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged... | 2026-10-06 |
| CVE-2026-84070 | high | 8.9 | No | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of in... | 2026-10-06 |
| CVE-2026-84064 | critical | 9.9 | No | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralizati... | 2026-10-06 |
| CVE-2026-84036 | high | 7.4 | No | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization. | 2026-10-06 |
| CVE-2026-84034 | high | 8.8 | No | IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-priv... | 2026-10-06 |
| CVE-2026-82832 | critical | 9.6 | No | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of in... | 2026-10-06 |
| CVE-2026-82340 | critical | 9.8 | No | IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispat... | 2026-10-06 |
| CVE-2026-81937 | high | 7.2 | No | IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file CLI command. A high... | 2026-10-06 |
| CVE-2026-81446 | high | 7.4 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenti... | 2026-10-06 |
| CVE-2026-81445 | high | 7.2 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged... | 2026-10-06 |
| CVE-2026-80356 | high | 7.3 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vul... | 2026-10-06 |
| CVE-2026-81453 | medium | 6.5 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('... | 2026-10-06 |
| CVE-2026-81443 | medium | 6.4 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privile... | 2026-10-06 |
| CVE-2026-81442 | high | 8.1 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged... | 2026-10-06 |
| CVE-2026-80355 | medium | 5.4 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthentic... | 2026-10-06 |
| CVE-2026-103630 | critical | 9.6 | No | Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via... | 2026-10-06 |