PT-2026-108346

🗓️ 28 Sep 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 8 Views

Read-side gadget in Axios request dispatch allows state-changing HTTP methods.

Reporter	Title	Published	Views	Family All 258
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities indompurify, axios, and i18next-http-backend	21 Oct 202615:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub	3 Nov 202618:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses axios-1.18.1, source-map-js-1.2.1, qs-6.16.0, pymongo-4.17.0, moment-2.30.1, pymongo-4.18.1 and ansible-14.4.0 which are vulnerable to multiple CVE	30 Oct 202606:22	–	ibm
IBM Security Bulletins	Security Bulletin: The Hub App for IBM QRadar SIEM contains components with known vulnerabilities	27 Oct 202600:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Test Accelerator for Z is affected by multiple vulnerabilities in axios	30 Oct 202623:08	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway	27 Oct 202616:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache HttpComponents Core, Apache Log4j API, and Axios in IBM Content Navigator and Content Cortex for Microsoft Office	2 Nov 202615:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities	28 Oct 202618:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	27 Oct 202617:00	–	ibm
Chainguard	CVE-2026-101902 vulnerabilities	2 Oct 202602:54	–	cgr

Source	Link
osv	www.osv.dev/vulnerability/AZL-105245
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-101902

28 Sep 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 46.9

EPSS0.00414

SSVC

Axios request dispatch prototype pollution state-changing HTTP method