PT-2026-33030

🗓️ 15 Apr 2026 00:00:00Reported by Positive TechnologiesType

Unbounded PGP AEAD chunk size in Bouncy Castle Java bcpg causes pre-auth resource exhaustion before version 1.84.

Reporter	Title	Published	Views	Family All 946
ibm	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
ibm	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-codec-http-4.1.129.Final.jar	28 Apr 202622:37	–	ibm
ibm	Security Bulletin: IBM Automation Decision Services for June 2026- Multiple CVEs addressed	14 Jul 202606:59	–	ibm
ibm	Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:17	–	ibm
ibm	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	15 Apr 202615:10	–	ibm
ibm	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for April 2026	30 Apr 202611:49	–	ibm
ibm	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses kafka-clients-3.9.1.jar which is vulnerable to CVE-2026-35554	29 May 202607:47	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	5 Jun 202610:12	–	ibm
ibm	Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in Bouncy Castle Crypto (CVE-2025-14813, CVE-2026-5598)	21 May 202615:57	–	ibm
ibm	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty and jackson-core (CVE-2026-33870, WS-2026-003)	11 May 202607:46	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CLEANSTART-2026-DY69070
osv	www.osv.dev/vulnerability/CVE-2024-22257
osv	www.osv.dev/vulnerability/ghsa-cvc6-q2cp-2xhw
osv	www.osv.dev/vulnerability/ghsa-qqpg-mvqg-649v
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-22257
osv	www.osv.dev/vulnerability/CVE-2026-3260
osv	www.osv.dev/vulnerability/CVE-2026-5598
suse	www.suse.com/security/cve/CVE-2026-5588
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-42585
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-42579

08 Jun 2026 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.18.7 - 9.8

CVSS 49.9

EPSS0.00952

SSVC