PT-2026-41161

🗓️ 14 May 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 46 Views

Vulnerability in baggage parsing allows unbounded memory use; fix enforces 8192 bytes and 64 entries.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	23 Sep 202622:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-codec-http-4.1.135.Final.jar	15 Sep 202620:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty	19 Aug 202618:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty and Milo	16 Sep 202607:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for June 2026 - Multiple CVEs addressed	8 Jul 202611:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to multiple Netty vulnerabilities (CVE-2026-59899, CVE-2026-59921)	3 Sep 202617:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	7 Sep 202607:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	29 Sep 202614:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ApplinX is vulnerable to allocation of resources without limits or throttling vulnerability caused due to parsing oversized baggage.	1 Sep 202610:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty and open62541	7 Aug 202613:04	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-15055
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-19032
t	www.t.me/cveNotify/275507
osv	www.osv.dev/vulnerability/CVE-2026-13586
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41852
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-2332
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54514
access	www.access.redhat.com/security/cve/CVE-2026-45292
osv	www.osv.dev/vulnerability/ghsa-mfg7-5gfp-c4w3
osv	www.osv.dev/vulnerability/CVE-2026-41851

18 Sep 2026 00:00Current

7High risk

Vulners AI Score7

CVSS 3.16.5 - 9.8

EPSS0.00849

SSVC

baggage parsing memory usage baggage limits 8192 bytes 64 entries opentelemetry java