PT-2026-28675

🗓️ 01 Jan 2026 00:00:00Reported by Positive TechnologiesType

Flawed regex with sequential optional groups causes exponential growth and denial of service; upgrade to 8.4 or later.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile is affected by multiple security vulnerabilties	22 May 202622:36	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	4 Sep 202622:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM DataStax Enterprise	27 May 202617:14	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in i18next, follow-redirects, & brace-expansion	25 Jun 202619:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	21 Sep 202606:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty	28 Apr 202613:06	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for Febuary 2023	10 Mar 202318:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to arbitrary code execution (CVE-2026-33937, CVE-2026-33938, CVE-2026-33940, CVE-2026-33941) and denial of service (CVE-2026-33939)	7 May 202613:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Tivoli Netcool/OMNIbus_GUI	26 May 202614:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses dompurify-3.3.2.tgz which is vulnerable to CVE-2026-41238, CVE-2026-41239, CVE-2026-41240.	28 Jul 202615:26	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-34043
osv	www.osv.dev/vulnerability/ghsa-wc8c-qw6v-h7f6
osv	www.osv.dev/vulnerability/CVE-2026-22737
osv	www.osv.dev/vulnerability/ghsa-3ppc-4f35-3m26
access	www.access.redhat.com/errata/RHSA-2026:65126
osv	www.osv.dev/vulnerability/CVE-2026-33349
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4926.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-41254
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-35213
osv	www.osv.dev/vulnerability/ghsa-442j-39wm-28r2

18 Sep 2026 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.02808

SSVC