PT-2026-45408

🗓️ 01 Jun 2026 00:00:00Reported by Positive TechnologiesType

Untrusted data deserialization in logback core allows proxy object injection and bypasses restrictions through 1.5.33.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin:Vulnerability in logback-core affects IBM Netezza Appliance	12 Aug 202608:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by Logback vulnerabilities that could allow deserialization of untrusted data resulting in object injection	19 Aug 202615:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by Logback vulnerabilities that could allow attackers to exploit conditional configuration file processing	15 Sep 202619:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework [CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854]	27 Jul 202620:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty.Spring WebFlux,Spring Framework,Bootstrap,Angular,Lodash,spring-security-config,Underscore might affect IBM Storage Defender Copy Data Management	30 Sep 202617:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	11 Oct 202614:40	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 Aug 202619:15	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cluster Export Services (CES) S3 are now addressed in 5.2.3.9 or higher and 6.0.1.0 or higher	24 Jul 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway Desktop Edition.	8 Sep 202618:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Spring Framework vulnerability that could allow Cross-site Scripting attacks, Denial of Service (DoS) attacks, and Server-Side Request Forgery attacks	26 Jun 202618:23	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2025-61732
osv	www.osv.dev/vulnerability/CVE-2026-39826
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-1605
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41848
osv	www.osv.dev/vulnerability/CVE-2026-56624
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-13006
osv	www.osv.dev/vulnerability/CVE-2026-47065
osv	www.osv.dev/vulnerability/ghsa-qqpg-mvqg-649v
osv	www.osv.dev/vulnerability/CVE-2026-41721
osv	www.osv.dev/vulnerability/CVE-2026-59888

08 Oct 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.3 - 9.8

CVSS 46.3

EPSS0.00539

SSVC