Veille CVE

Semaine du 14 septembre au 20 septembre 2026

3 CVE

  1. CVE-2025-14754 8.8 Élevée

    IBM Cloud Pak for Data

    IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

  2. CVE-2025-14753 7.5 Élevée

    IBM Cloud Pak for Data

    IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

  3. CVE-2026-17467 8.2 Élevée

    IBM Cloud Pak for Data System (Yosemite 1.0)

    IBM Cloud Pak for Data System (Yosemite 1.0) 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols.