PT-2026-36309

🗓️ 01 May 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 7 Views

Apache Neethi policy normalization can cause memory exhaustion and denial of service; upgrade to version 3.2.2.

Reporter	Title	Published	Views	Family All 1200
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-codec-http-4.1.129.Final.jar	28 Apr 202622:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for June 2026- Multiple CVEs addressed	14 Jul 202606:59	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in kafka-clients-3.9.1.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-33558)	29 May 202608:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:17	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Apache Kafka affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-35554, CVE-2026-33558)	27 Jul 202622:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the netty-codec-http library.(CVE-2026-33870).	3 Aug 202608:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	15 Apr 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Tivoli Netcool Impact 7.1.1.0	1 Jul 202619:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for April 2026	30 Apr 202611:49	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/ghsa-5qcv-4rpc-jp93
osv	www.osv.dev/vulnerability/ghsa-f6hv-jmp6-3vwv
osv	www.osv.dev/vulnerability/ghsa-wf66-mphr-4c4r
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-42587
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-42403
osv	www.osv.dev/vulnerability/ghsa-v8h7-rr48-vmmv
lists	www.lists.apache.org/thread/p826j0phhmr9f83wzpmys1y0bdfrr2q4
osv	www.osv.dev/vulnerability/CVE-2026-42580
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-5588
twitter	www.twitter.com/VulmonFeeds/status/2050171892783288603

08 Jun 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5 - 9.1

CVSS 48.7

EPSS0.01125

SSVC