PT-2026-33029

🗓️ 15 Apr 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 6 Views

LDAP injection in BC-JAVA bcprov due to improper input handling affects prior to 1.84.

Reporter	Title	Published	Views	Family All 1217
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-codec-http-4.1.129.Final.jar	28 Apr 202622:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for June 2026- Multiple CVEs addressed	14 Jul 202606:59	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in kafka-clients-3.9.1.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-33558)	29 May 202608:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	15 Apr 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for April 2026	30 Apr 202611:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	5 Jun 202610:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	7 May 202612:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty and jackson-core (CVE-2026-33870, WS-2026-003)	11 May 202607:46	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/ghsa-wf66-mphr-4c4r
osv	www.osv.dev/vulnerability/ghsa-cm33-6792-r9fm
osv	www.osv.dev/vulnerability/CVE-2026-0636
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-0636
osv	www.osv.dev/vulnerability/CVE-2026-5588
osv	www.osv.dev/vulnerability/openSUSE-SU-2026:10571-1
access	www.access.redhat.com/security/cve/CVE-2026-0636
suse	www.suse.com/security/cve/CVE-2025-14813
osv	www.osv.dev/vulnerability/ghsa-2hfh-9h53-qc24
access	www.access.redhat.com/errata/RHSA-2026:18055

21 Jun 2026 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5 - 9.8

CVSS 48.7

EPSS0.01125

SSVC

ldap injection bouncy castle bc java input handling prior to 1.84