PT-2026-26970

🗓️ 22 Mar 2026 00:00:00Reported by Positive TechnologiesType

Pygments flaw up to 2.19.2 affects AdlLexer in archetype.py via inefficient regex; local access required; exploit public.

Reporter	Title	Published	Views	Family All 529
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	1 Apr 202607:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Name Handling in Werkzeug [CVE-2026-27199]	14 Apr 202615:11	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak	14 May 202613:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Engineering AI hub.	14 Jul 202611:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem	9 Apr 202610:57	–	ibm
IBM Security Bulletins	Security Bulletin: Location Service for ESRI Component uses cryptography-46.0.3, flask-3.1.2 and werkzeug-3.1.5 library which were vulnerable to CVE-2026-26007, CVE-2026-27205 and CVE-2026-27199 respectively	30 Mar 202615:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in pygments-2.19.2-py3-none-any.whl	6 May 202604:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses Werkzeug which is vulnerable to CVE-2026-27199	5 May 202608:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by improper handling of Windows device names due to Werkzeug	8 Jul 202609:41	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.	27 Apr 202607:44	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/ghsa-2vrm-gr82-f7m5
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-35536
osv	www.osv.dev/vulnerability/ghsa-mf9v-mfxr-j63j
osv	www.osv.dev/vulnerability/CVE-2026-44307
osv	www.osv.dev/vulnerability/ghsa-29h4-r29x-hchv
osv	www.osv.dev/vulnerability/ghsa-hg6j-4rv6-33pg
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-44307
osv	www.osv.dev/vulnerability/ghsa-3x9g-8vmp-wqvf
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34073
osv	www.osv.dev/vulnerability/ghsa-hcc4-c3v8-rx92

18 Sep 2026 00:00Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.15.3 - 9.8

CVSS 46.3

CVSS 21.7

CVSS 33.3

EPSS0.00543

SSVC