Security Vulnerabilities
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-08-14
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication.
CVSS Score
5.3
EPSS Score
0.003
Published
2026-08-14
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation.
CVSS Score
7.5
EPSS Score
0.006
Published
2026-08-14
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVSS Score
8.3
EPSS Score
0.005
Published
2026-08-14
An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope.
CVSS Score
5.3
EPSS Score
0.002
Published
2026-08-14
An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue.
CVSS Score
8.7
EPSS Score
0.011
Published
2026-08-14
A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database.
CVSS Score
7.1
EPSS Score
0.002
Published
2026-08-14
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.
CVSS Score
9.4
EPSS Score
0.078
Published
2026-08-14
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account.
CVSS Score
9.4
EPSS Score
0.028
Published
2026-08-14
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized cross-group user management.
CVSS Score
8.6
EPSS Score
0.002
Published
2026-08-14