PT-2026-4468

🗓️ 01 Jan 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 12 Views

DoS in Python google.protobuf.json ParseDict() via bypassed recursion depth for nested Any.

Reporter	Title	Published	Views	Family All 483
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses protobuf-4.25.3-cp37-abi3-manylinux2014_x86_64.whl, protobuf-6.33.4-cp39-abi3-manylinux2014_x86_64.whl which is vulnerable to CVE-2026-0994	29 May 202608:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities	29 Jul 202607:43	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM Maximo Application Suite AI-Service component uses multiple third-party dependencies that contain vulnerabilities associated with multiple CVEs.	2 Feb 202604:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring and Dashboard operands are vulnerable to denial of service (CVE-2026-0994)	15 Apr 202609:45	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak	25 May 202618:49	–	ibm
IBM Security Bulletins	Security Bulletin: Investigation Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	26 Feb 202601:05	–	ibm
IBM Security Bulletins	Security Bulletin: The Network Threat Analytics App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	24 Jun 202614:04	–	ibm
IBM Security Bulletins	Security Bulletin: EDB Postgres AI Database with IBM is affected by Multiple Vulnerabilities.	29 Sep 202622:06	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak	14 May 202613:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.	3 Aug 202609:01	–	ibm

Source	Link
access	www.access.redhat.com/errata/RHSA-2026:3462
osv	www.osv.dev/vulnerability/ROOT-APP-PYPI-CVE-2026-0994
osv	www.osv.dev/vulnerability/CVE-2026-44307
errata	www.errata.almalinux.org/9/ALSA-2026-3095.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-44307
osv	www.osv.dev/vulnerability/CLEANSTART-2026-KE11953
osv	www.osv.dev/vulnerability/CVE-2024-56326
osv	www.osv.dev/vulnerability/CVE-2025-69223
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-56326
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0994.json

18 Sep 2026 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 48.2

CVSS 3.17.5

EPSS0.00722

SSVC

denial of service python protobuf parse dict nested any recursion depth recursion error