Veille CVE

Mercredi 21 octobre 2026

5 CVE sur 14

Critique 2 Élevée 5 Moyenne 6 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM i » ✕
  1. CVE-2026-93888 7.8 Élevée

    IBM Sterling Connect Direct for Unix

    IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.

  2. CVE-2026-93442 8.2 Élevée

    IBM QRadar

    IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.

  3. CVE-2026-93441 8.6 Élevée

    IBM QRadar Security Information and Event Management

    IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

  4. CVE-2026-82891 8.1 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.

  5. CVE-2026-76587 8.8 Élevée

    IBM Planning Analytics

    IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.