PT-2026-28675

🗓️ 01 Jan 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 14 Views

Flawed regex with sequential optional groups causes exponential growth and denial of service; upgrade to 8.4 or later.

Reporter	Title	Published	Views	Family All 166
IBM Security Bulletins	Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty	28 Apr 202613:06	–	ibm
IBM Security Bulletins	Security Bulletin:IBM Watson Discovery Cartridge affected by vulnerabilities in axios-1.12.2.tgz	9 Jun 202615:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in lodash, cryptography and axios might affect IBM Storage Defender Sentinel Anomaly Scan Engine.	26 Jun 202616:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	12 Jun 202606:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Loop has multiple vulnerabilities	24 Jul 202609:20	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in path-to-regexp	28 May 202613:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js module path-to-regexp	16 Jun 202610:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities reported in the axios package	27 May 202612:48	–	ibm
IBM Security Bulletins	Security Bulletin:Axios Prototype Pollution: Intercept JSON Responses or Hijack HTTP Transport	7 Aug 202610:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (May 2026)	14 May 202601:21	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-42037
osv	www.osv.dev/vulnerability/CVE-2026-2950
osv	www.osv.dev/vulnerability/CVE-2026-33896
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-29786
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-44455
osv	www.osv.dev/vulnerability/CVE-2026-21637
osv	www.osv.dev/vulnerability/ghsa-69xw-7hcm-h432
cna	www.cna.openjsf.org/security-advisories.html
osv	www.osv.dev/vulnerability/ghsa-w5hq-g745-h8pq
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-4923

19 Aug 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

EPSS0.00791

SSVC