CLSA-2026-1792015256 TuxCare security update for ch.qos.logback (4 CVEs)

🗓️ 14 Oct 2026 22:00:56Reported by GoogleType

osv-clsa🔗 osv.dev👁 2 Views

TuxCare security update addresses 4 CVEs in ch.qos.logback.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin:Vulnerability in logback-core affects IBM Netezza Appliance	12 Aug 202608:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by Logback vulnerabilities that could allow deserialization of untrusted data resulting in object injection	19 Aug 202615:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by Logback vulnerabilities that could allow attackers to exploit conditional configuration file processing	15 Sep 202619:09	–	ibm
IBM Security Bulletins	Security Bulletin: SSRF Vulnerability in QOS.CH Logback via Malicious DOCTYPE in XML Config (v0.1–1.3.14, 1.4.0–1.5.12)	23 Jul 202510:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	6 Feb 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Asset Data Dictionary uses multiple third party dependencies which is vulnerable to CVEs.	6 Feb 202505:30	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 Aug 202619:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Input Validation in QOS.CH logback-core [CVE-2026-1225]	27 Feb 202615:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway Desktop Edition.	8 Sep 202618:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition (ITNM).	29 May 202515:46	–	ibm

15 Oct 2026 09:47Current

6.5Medium risk

Vulners AI Score6.5

CVSS 46.3

EPSS0.00458

SSVC

ch.qos.logback TuxCare library