CVE Vulnerabilities - 12 August 2026

IBM DOORS Next is affected by a security weakness that allows an authenticated user to access data they shouldn't have. This could lead to unauthorized changes or disclosure of sensitive information. ...

SeaweedFS, a distributed storage system, has a security issue that allows attackers to access files from other buckets. This is fixed in version 4.30. Update to the latest version to protect your data...

A security issue in Prompty, a markdown file format for LLM prompts, allowed an attacker to run malicious code on the server. This could potentially lead to unauthorized actions or data breaches. To f...

An attacker can execute code on your website without a password, which could lead to data theft or other malicious activities. This affects Joomla websites using Fabrik versions lower than 4.6.8. To p...

An attacker can manipulate file paths and overwrite files on the system by creating a malicious backup archive for LXD. This could lead to unauthorized access or data loss. Update LXD to the latest ve...

A vulnerability in Red Hat Advanced Cluster Management allows a tenant with limited access to gain high-level privileges and potentially execute arbitrary code on the cluster. This can happen when a t...

An attacker with permission to create instances in one project can move a specially crafted instance to another project, potentially executing arbitrary commands. This can happen if an instance is cre...

An attacker with LXD access can inject malicious configuration, potentially allowing them to execute code on the host system. This risk exists when an authenticated user configures an NVIDIA instance ...

An attacker with valid access can copy instances into projects with tighter security controls. This could allow them to gain more privileges or access sensitive data. To mitigate this risk, ensure all...

An attacker can move instances into projects with restricted settings, bypassing security controls. This is a concern because it allows unauthorized access to sensitive data or systems. To mitigate th...

An attacker can exploit a weakness in LXD's image import process to gain root access on a system. This happens when a malicious image archive contains a specially crafted backup file. To protect your ...

LXD, a Linux container manager, has a vulnerability that allows an attacker to access and modify files on the host system by importing a specially crafted image. This could lead to unauthorized data a...

A flaw in ScadaLTS 2.7.8.1 allows any authenticated user to execute system commands on the host, potentially leading to a complete system compromise. This affects any system running ScadaLTS 2.7.8.1. ...

An attacker with access to LXD can move instances into restricted projects without permission. This allows them to introduce unwanted configurations into those projects. To protect your systems, ensur...

An attacker with specific permissions can inject malicious code into a critical system component, potentially gaining elevated privileges and accessing sensitive information. This vulnerability affect...

An attacker in a specific namespace can create a resource that grants them access to sensitive cluster-wide secrets and elevated permissions. This is a significant risk because it allows the attacker ...

IBM i versions 7.6, 7.5, 7.4, and 7.3 have a security weakness that could allow an attacker to take control of your system remotely. This means an attacker could potentially access and manipulate sens...

A security issue in Prowler's Kubernetes provider allows an attacker to execute commands on the system if they have access to a misconfigured Kubernetes configuration file. This could potentially allo...

A vulnerability in OpenShift's multicloud integrations component allows an attacker to execute arbitrary code on managed clusters. This can happen if a tenant with permission to create applications on...

IBM Db2 versions 11.5 and 12.1 have a security issue that allows an attacker to potentially cause a system crash or execute malicious code when importing data. This is a serious risk because an attack...

A security flaw in the MongoDB BI Connector ODBC driver could cause the program using it to crash or behave unexpectedly. This is because the driver doesn't handle very long names properly, which can ...

IBM Verify Identity Access and IBM Security Verify Access may not properly verify user input, potentially allowing attackers to bypass security checks. This affects users who rely on these systems for...

Certain versions of IBM Db2 are vulnerable to a security weakness that could allow an attacker to gain more access to the database than they should have. This matters because it could allow unauthoriz...

WolfStack versions before 25.9.2 have a security flaw that allows unauthorized access to Docker and LXC containers. This means that an attacker could potentially gain access to sensitive information a...

The VinceTrack software has a flaw that allows unauthorized access to sensitive case information. This can happen when a coordinator uploads a case artefact that is not shared, but is still accessible...