PT-2026-36996

🗓️ 05 May 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 23 Views

normalize() decodes encoded authority delimiters and emits them as raw separators, enabling spoofing.

Reporter	Title	Published	Views	Family All 166
IBM Security Bulletins	Security Bulletin: Vulnerabilities in axios, follow-redirects, fast-uri and babel might affect IBM Storage Defender Sentinel Anomaly Scan Engine.	27 Jun 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	16 Jun 202616:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub	24 Apr 202616:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	8 Jul 202608:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to arbitrary code execution, loss of confidentiality and denial of service	6 May 202613:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses node-forge-1.3.2.tgz, node-forge-1.3.3.tgz which is vulnerable to CVE-2026-33891, CVE-2026-33894, CVE-2026-33895, CVE-2026-33896	5 May 202612:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Endpoint Management is affected by multiple vulnerabilities.	22 Jul 202613:56	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of node-forge-1.3.1.tgz, IBM Sterling Connect:Direct Web Services is affected by Denial of Service (DoS).	2 Jun 202612:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	22 Jul 202617:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs	1 Jun 202609:22	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-44455
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-42043
osv	www.osv.dev/vulnerability/ghsa-xjpj-3mr7-gcpf
osv	www.osv.dev/vulnerability/CVE-2026-29085
osv	www.osv.dev/vulnerability/ghsa-458j-xx4x-4375
osv	www.osv.dev/vulnerability/ghsa-2qvq-rjwj-gvw9
osv	www.osv.dev/vulnerability/ghsa-xhpv-hc6g-r9c6
osv	www.osv.dev/vulnerability/CVE-2026-33896
osv	www.osv.dev/vulnerability/ghsa-2g4f-4pwh-qvx6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-2739

28 Jul 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5 - 9.1

EPSS0.00475

SSVC