Lucene search
+L

PT-2026-146133

🗓️ 03 Nov 2026 00:00:00Reported by Positive TechnologiesType 
ptsecurity
 ptsecurity
🔗 dbu.gs👁 2 Views

Resource exhaustion in SonarQube during Java object deserialization in Google Guava.

Related
Refs
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: IBM WebSphere Application Server, bundled with IBM Enterprise Application Runtimes, is affected by multiple vulnerabilities
6 Nov 202615:59
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository
5 Nov 202616:41
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM WebSphere Application Server, bundled with IBM WebSphere Hybrid Edition, is affected by multiple vulnerabilities
6 Nov 202615:57
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM WebSphere Application Server, bundled with IBM Cloud Pak for Applications, is affected by multiple vulnerabilities
6 Nov 202615:52
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow (CVE-2026-91865, CVE-2026-91867, CVE-2026-102554)
6 Nov 202609:30
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerability has been detected in IBM Security Verify Governance Identity Manager Adapters
12 Nov 202617:13
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM SPSS Analytic Server is affected by a Google Guava deserialization vulnerability that could cause a denial of service through excessive memory allocation
28 Oct 202606:31
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Terracotta is affected by multiple guava vulnerabilities that could allow attackers to to access sensitive data in insecure temporary files or cause a denial of service via memory exhaustion during deserialization
13 Nov 202615:32
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server
5 Nov 202618:54
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Data Replication AI Edition 12.0.0 is affected by injection, denial of service, and path traversal vulnerabilities in Apache Derby, PostgreSQL JDBC Driver, Google Guava, Jakarta Mail, and Kubernetes Java client.
9 Nov 202619:19
–ibm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Nov 2026 00:00Current
6.2Medium risk
Vulners AI Score6.2
CVSS 48.2
EPSS0.00352
SSVC
2