CLEANSTART-2026-JC64695 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-26958, CVE-2026-35469, ghsa-f6x5-jh6r-wrfv, ghsa-fw7p-63qq-7hpr, ghsa-gx3x-vq4p-mhhv, ghsa-j5w8-q4qc-rx2x, ghsa-mh2q-q3fh-2475, ghsa-pc3f-x583-g7j2 applied in versions: 1.16.1-r0, 1.16.1-r1, 1.18.0-r0, 1.19.0-r1

🗓️ 18 May 2026 13:43:45Reported by GoogleType

Security fixes for multiple vulnerabilities in percona-xtradb-cluster-operator-fips; resolved in later releases.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (July 2026 - Part 2 of 2)	7 Aug 202601:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to loss of confidentiality (CVE-2025-68121)	31 Mar 202615:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) CallHome component is affected by multiple vulnerabilities	12 Oct 202609:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	10 Mar 202612:40	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Allocation of Resources Without Limits or Throttling (CVE-2026-35469)	3 Sep 202618:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	27 Aug 202619:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	18 Jul 202609:05	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in Crypto affects IBM Netezza Appliance	10 Aug 202608:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	26 May 202606:03	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to handshake corruption due to the crypto/tls package (CVE-2025-68121)	24 Mar 202614:10	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-JC64695.json
osv	www.osv.dev/vulnerability/CVE-2025-61732
osv	www.osv.dev/vulnerability/CVE-2025-68121
osv	www.osv.dev/vulnerability/CVE-2026-26958
osv	www.osv.dev/vulnerability/CVE-2026-35469
osv	www.osv.dev/vulnerability/ghsa-f6x5-jh6r-wrfv
osv	www.osv.dev/vulnerability/ghsa-fw7p-63qq-7hpr
osv	www.osv.dev/vulnerability/ghsa-gx3x-vq4p-mhhv
osv	www.osv.dev/vulnerability/ghsa-j5w8-q4qc-rx2x
osv	www.osv.dev/vulnerability/ghsa-mh2q-q3fh-2475

18 Sep 2026 12:16Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.19.1 - 10

CVSS 48.7

EPSS0.00915

SSVC