RCE (Remote Code Execution) form-data Dependency in Bamboo Data Center

🗓️ 07 Aug 2026 16:31:23Reported by security-metrics-botType

Bamboo Data Center RCE via form-data library CRLF injection allows unauthenticated arbitrary code execution.

Reporter	Title	Published	Views	Family All 602
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	21 Aug 202617:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-12143)	24 Jul 202616:33	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in JavaScript	13 Jul 202608:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in JavaScript	13 Jul 202608:36	–	ibm
IBM Security Bulletins	Security Bulletin: form-data CRLF Injection via Unescaped Field Name and Filename	7 Aug 202610:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:32	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in form-data and DOMPurify	21 Jul 202605:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	17 Aug 202610:39	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in form-data affects IBM Netezza Appliance	10 Aug 202612:25	–	ibm