Mardi 13 octobre 2026
1 CVE sur 2
Critique 0
Élevée 1
Moyenne 1
Faible 0
Non évaluée 0
Exploitées (KEV)
Tri : plus récentes
« codefori vscode-ibmi » ✕
-
CVE-2026-49483 8.9 Élevée
codefori vscode-ibmi
Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, IBMi components implementing IBMiComponent were accepted after checking that a procedure existed without reliably verifying component integrity. Components installed with broad public permissions allow another local account to alter a program such as GETMBRINFO. A later connection can execute the altered program under the connecting account because the LONG_COMMENT marker alone does not establish integrity. This issue is fixed in version 3.0.1.