Veille CVE

Mercredi 2 septembre 2026

4 CVE

Critique 1 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM i » ✕
  1. CVE-2026-18544 8.1 Élevée

    IBM Portieris

    IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references.

  2. CVE-2026-18849 6.8 Moyenne

    IBM OPENBMC · Ibm power system e1050 \(9043-mrx\) firmware · Ibm power system l1022 \(9786-22h\) firmware · Ibm power system l1024 \(9786-42h\) firmware

    IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.

  3. CVE-2026-16821 7.8 Élevée

    IBM AIX · IBM PowerVM VIOS · Ibm vios

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability.

  4. CVE-2026-3627 9.1 Critique

    IBM Concert

    IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.