PT-2026-35052

🗓️ 24 Apr 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 10 Views

Axios before versions 1.15.1 and 0.31.1 bypasses no-proxy via 127.0.0.0/8 URLs not 127.0.0.1 vulnerability 2025 62718.

Reporter	Title	Published	Views	Family All 178
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to arbitrary code execution (CVE-2026-33937, CVE-2026-33938, CVE-2026-33940, CVE-2026-33941) and denial of service (CVE-2026-33939)	7 May 202613:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	24 Apr 202617:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	24 Apr 202614:07	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Axios	5 Jun 202609:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036, CVE-2026-42037	29 May 202607:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i	9 Jul 202621:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple axios vulnerabilities (CVE-2026-42033 through CVE-2026-42044).	2 Jun 202611:26	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in axios	21 May 202616:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses axios-1.15.0.tgz which is vulnerable to multiple CVEs.	1 Jun 202607:54	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Handlebars	5 May 202609:18	–	ibm

Source	Link
access	www.access.redhat.com/errata/RHSA-2026:22465
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-29045
access	www.access.redhat.com/errata/RHSA-2026:20938
twitter	www.twitter.com/VulmonFeeds/status/2047918209357992008
osv	www.osv.dev/vulnerability/CVE-2026-25639
access	www.access.redhat.com/errata/RHSA-2026:33574
osv	www.osv.dev/vulnerability/ghsa-w7fw-mjwx-w883
osv	www.osv.dev/vulnerability/CVE-2026-42042
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-39408
access	www.access.redhat.com/errata/RHSA-2026:16534

13 Aug 2026 00:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.19.8 - 10

EPSS0.02254

SSVC