PT-2026-3133

🗓️ 15 Jan 2026 00:00:00Reported by Positive TechnologiesType

Static handler cache can be manipulated to block access to static files using crafted URIs; fixed in Vert.x Core.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Netty IBM webMethods Managed File Transfer is vulnerable to Improper Access Control and Allocation of Resources without Limits or Throttling	6 Aug 202613:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilties in IBM DevOps Test Virtualization/IBM DevOps Test Integrations and APIs	22 Oct 202614:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in netty affects IBM Netezza Appliance	13 Aug 202606:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	15 Apr 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to HTTP Request Smuggling CVE-2026-1002	8 Jun 202616:23	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in vertx-core-4.1.0.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-1002)	3 Mar 202604:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	19 Jun 202608:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by a Vert.x Web Static Handler cache manipulation vulnerability (CVE-2026-1002)	14 May 202617:22	–	ibm

Source	Link
github	www.github.com/eclipse-vertx/vert.x
osv	www.osv.dev/vulnerability/CLEANSTART-2026-IA43044
osv	www.osv.dev/vulnerability/CVE-2025-48734
twitter	www.twitter.com/CVEnew/status/2011926033092710686
osv	www.osv.dev/vulnerability/ghsa-pwqr-wmgm-9rr8
osv	www.osv.dev/vulnerability/CVE-2025-12383
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-58056
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-67735
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-VJ37814.json
osv	www.osv.dev/vulnerability/CVE-2026-42584

15 Oct 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5 - 9.8

CVSS 46.9

EPSS0.01065

SSVC