PT-2026-35068

🗓️ 16 Apr 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 17 Views

Authlib enables OAuth and OpenID Connect; OAuth cache lacked CSRF protection before 1.6.11 and is fixed.

Reporter	Title	Published	Views	Family All 414
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.0	30 Jun 202616:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:35	–	ibm
IBM Security Bulletins	Security Bulletin:lxml Local File Access Vulnerability: Fixed in 6.1.0	4 Aug 202609:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by an XML external entity (XXE) vulnerability due to lxml	8 Jul 202609:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses lxml-6.0.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl which is vulnerable to CVE-2026-41066	1 Jun 202607:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in pyjwt-2.12.1-py3-none-any.whl	17 Jun 202615:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in lxml bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging	13 Jul 202621:50	–	ibm
IBM Security Bulletins	Security Bulletin: Investigation Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	23 Jul 202613:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images	18 May 202616:50	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-34514
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34517
osv	www.osv.dev/vulnerability/CVE-2026-31958
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34518
osv	www.osv.dev/vulnerability/CVE-2026-48522
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41066
osv	www.osv.dev/vulnerability/CVE-2026-48523
osv	www.osv.dev/vulnerability/CVE-2026-44431
osv	www.osv.dev/vulnerability/CVE-2026-42561
osv	www.osv.dev/vulnerability/GHSA-jj8c-mmj3-mmgv

16 Jul 2026 00:00Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.15.4 - 7.5

EPSS0.00476

SSVC