CVE-2026-96012
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that
CVSS
9.9
Crítico
EPSS
0.5%
p42
KEV
—
Exploit Today
13
0-100
Publicado: 12 oct 2026 · Última mod.: 13 oct 2026 · CWE-264
0.5%EPSS · 30 días0.5%
2026-10-132026-10-21
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated privileges on the system.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1087885.3 MED1.3%
——0A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.8dCVE-2026-764886.5 MED19.9%
——6A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.
This vulnerability is due to insufficient access control to file system resources. An attacker could exploit this vulnerability by submitting crafted values in specific UI fields. A successful exploit could allow the attacker to access sensitive files from the underlying file system of an affected device, including key materials that could be used to elevate privileges to root on the affected APIC and on managed switches.14dCVE-2026-1011026.3 MED11.7%
——4A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state the worker is "containment, not a security boundary". The vendor was contacted early about this disclosure but did not respond in any way.21dCVE-2026-764128.5 ALT37.3%
——11A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service.
This vulnerability is due to an error when checking the privilege level of a user who is invoking remote diagnostics. An attacker could exploit this vulnerability by authenticating to the device, either through the web-based management interface or the REST API, and using the remote diagnostics debugger to grant a user elevated privileges. A successful exploit could allow the attacker to elevate privileges to root.
Notes:
To exploit this vulnerability, the attacker must have valid user credentials on the affected device.
The CVSSv3.1 Attack Complexity is High due to the multistage process required to fully exploit this vulnerability.34dCVE-2026-816444.3 MED13.4%
——4DoS vulnerability in the preview service module.
Impact: Successful exploitation of this vulnerability may affect availability.43dCVE-2026-493157.1 ALT1.4%
——0DoS vulnerability in the input device module.
Impact: Successful exploitation of this vulnerability may affect availability.43d