PT-2026-35908

🗓️ 29 Apr 2026 00:00:00Reported by Positive TechnologiesType

Spring MVC and WebFlux risk cache poisoning with encoded resources when caching is enabled and the cache is empty.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in spring boot (CVE-2026-40973, CVE-2026-40975, CVE-2026-40977)	16 Sep 202607:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Security QRadar EDR Software	11 Feb 202616:52	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Netty IBM webMethods Managed File Transfer is vulnerable to Improper Access Control and Allocation of Resources without Limits or Throttling	6 Aug 202613:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilties in IBM DevOps Test Virtualization/IBM DevOps Test Integrations and APIs	22 Oct 202614:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	30 Oct 202520:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a sensitive information exposure in VMware Tanzu Spring [CVE-2024-38816]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Processing is vulnerable to a CRLF injection vulnerability in Netty (CVE-2025-67735)	4 Jun 202607:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by Multiple Vulnerabilities.	15 Jun 202619:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in netty-codec-4.1.124.Final.jar, netty-codec-http-4.1.108.Final.jar, netty-codec-http2-4.1.124.Final.jar affecting MongoDB Enterprised Advanced (CVE-2025-58056, CVE-2025-58057, CVE-2025-67735)	24 Feb 202619:17	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-22737
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-42584
osv	www.osv.dev/vulnerability/CVE-2026-50010
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-42581
osv	www.osv.dev/vulnerability/CVE-2026-45416
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-38819
spring	www.spring.io/security/cve-2024-38828
osv	www.osv.dev/vulnerability/CVE-2023-2976
osv	www.osv.dev/vulnerability/ghsa-x4gw-5cx5-pgmh
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-50020

12 Oct 2026 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.13.1 - 7.5

EPSS0.21263

SSVC