CLEANSTART-2026-NW12954 Security fixes for CVE-2020-8908, CVE-2023-2976, CVE-2025-67735, CVE-2026-0636, CVE-2026-1225, CVE-2026-22741, CVE-2026-22745, CVE-2026-22746, CVE-2026-22751, CVE-2026-33870, CVE-2026-33871, CVE-2026-40973, CVE-2026-41284, CVE-2026-41293, CVE-2026-41417, CVE-2026-42498, CVE-2026-42580, CVE-2026-42581, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587, CVE-2026-43512, CVE-2026-43513, CVE-2026-43514, CVE-2026-43515, CVE-2026-44249, CVE-2026-45416, CVE-2026-50010, CVE-2026-50020, CVE-2026-5598, ghsa-38f8-5428-x5cv, ghsa-3qp7-7mw8-wx86, ghsa-563q-j3cm-6jxm, ghsa-57rv-r2g8-2cj3, ghsa-5mg8-w23w-74h3, ghsa-5x3r-wrvg-rp6q, ghsa-72hv-8253-57qq, ghsa-7g45-4rm6-3mm3, ghsa-84h7-rjj3-6jx4, ghsa-c2gf-v879-257j, ghsa-c653-97m9-rcg9, ghsa-f6hv-jmp6-3vwv, ghsa-hvcg-qmg6-jm4c, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-pwqr-wmgm-9rr8, ghsa-qqpg-mvqg-649v, ghsa-v8h7-rr48-vmmv, ghsa-w9fj-cfpg-grvv, ghsa-wwpq-f5c3-7hvx, ghsa-x4gw-5cx5-pgmh, ghsa-xxqh-mfjm-7mv9 applied in versions: 4.3.2-r2, 4.3.2-r3

🗓️ 21 Jul 2026 10:26:27Reported by GoogleType

osv🔗 osv.dev👁 12 Views

Security fixes for cloud-config-server addressing multiple CVEs; upgrade from 4.3.2-r2 or 4.3.2-r3 to a later release.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multipe vulnerabilities in DITA may affect IBM Business Automation Workflow Case Management docGenerator feature (CVE-2023-2976, CVE-2022-44729, CVE-2022-44730)	12 Dec 202309:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in spring boot (CVE-2026-40973, CVE-2026-40975, CVE-2026-40977)	16 Sep 202607:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	21 Sep 202606:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Security QRadar EDR Software	11 Feb 202616:52	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a sensitive information exposure in Google Guava [CVE-2023-2976]	29 Sep 202320:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-codec-http-4.1.129.Final.jar	28 Apr 202622:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView	2 Jul 202616:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for June 2026- Multiple CVEs addressed	14 Jul 202606:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat Server library (CVE-2026-41293, CVE-2026-24880) affect Power HMC.	1 Jul 202616:49	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NW12954.json
osv	www.osv.dev/vulnerability/CVE-2020-8908
osv	www.osv.dev/vulnerability/CVE-2023-2976
osv	www.osv.dev/vulnerability/CVE-2025-67735
osv	www.osv.dev/vulnerability/CVE-2026-0636
osv	www.osv.dev/vulnerability/CVE-2026-1225
osv	www.osv.dev/vulnerability/CVE-2026-22741
osv	www.osv.dev/vulnerability/CVE-2026-22745
osv	www.osv.dev/vulnerability/CVE-2026-22746
osv	www.osv.dev/vulnerability/CVE-2026-22751

18 Sep 2026 12:16Current

6.7Medium risk

Vulners AI Score6.7

CVSS 22.1

CVSS 3.18.1 - 9.8

CVSS 49.9

EPSS0.0168

SSVC