Critical Alert 3 Active Exploits Detected Today

CVE-2026-58644 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability →
CVE-2026-25089 — Fortinet FortiSandbox OS Command Injection Vulnerability →
CVE-2026-39808 — Fortinet FortiSandbox OS Command Injection Vulnerability →
Powered by CVE Watchtower
×
July 18, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-15069NVD

Vulnerability Summary

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary script code due to improper neutralization of input during web page generation.
Severity Level
MEDIUM(5.4)
Published Date
Jul 17, 2026
Last Modified
Jul 17, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-78: OS Command Injection ↗
The software constructs all or part of an OS command using externally-influenced input, but does not properly neutralize special elements.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
ScopeUnchanged
ConfidentialityLow
IntegrityLow
AvailabilityNone

External References