PT-2025-39521

🗓️ 26 Sep 2025 00:00:00Reported by Positive TechnologiesType

Username enumeration in multi attribute login of web service products; error reveals valid users, aiding brute-force

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	20 Aug 202615:19	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Apache HttpComponents Client 5.4, IBM Sterling Control Center is vulnerable to Improper Certificate Validation (CVE-2026-71290)	22 Sep 202610:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.1	1 Oct 202610:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in jackson-databind-2.16.0.jar	15 Sep 202620:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in jackson-databind [CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515]	24 Aug 202622:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in log4j (CVE-2026-49844)	8 Oct 202616:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jackson-databind affects DB2 Dev Extension (CVE-2026-59888, CVE-2026-59889)	17 Sep 202619:55	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been detected in IBM Security Verify Governance Identity Manager Adapters	13 Jul 202606:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for August 2026	31 Aug 202610:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.	25 Jul 202616:37	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2025-1396
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-19032
osv	www.osv.dev/vulnerability/CVE-2025-55754
t	www.t.me/cveNotify/136509
osv	www.osv.dev/vulnerability/CLEANSTART-2026-WA25182
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WA25182.json
osv	www.osv.dev/vulnerability/ghsa-r7wm-3cxj-wff9
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YP50898.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-83557
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54514

18 Sep 2026 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.5 - 9.8

CVSS 46.3

EPSS0.00999

SSVC