CLSA-2026-1790159292 TuxCare security update for org.springframework.security (8 CVEs)

🗓️ 23 Sep 2026 10:28:12Reported by GoogleType

osv🔗 osv.dev👁 5 Views

TuxCare org.springframework.security 6.3.9-tuxcare.1 fixes 8 vulnerabilities.

Reporter	Title	Published	Views	Family All 570
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Spring-Security affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-22732)	23 Jul 202611:56	–	ibm
IBM Security Bulletins	Security Bulletin: Security Misconfiguration Vulnerability in Spring Security Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-22748)	11 Sep 202618:32	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to issues in Spring	27 Apr 202609:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	12 Aug 202611:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	10 Jul 202603:50	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	6 Aug 202620:36	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Spring Vulnerabilities in IBM Library Support for Spring	31 Mar 202616:55	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.	27 Apr 202607:43	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Direct Request ('Forced Browsing') (CVE-2026-22732)	16 Jun 202614:14	–	ibm

23 Sep 2026 20:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.18.1 - 9.1

EPSS0.0048

SSVC

org.springframework.security TuxCare 6.3.9-tuxcare.1 library