PT-2026-51676

🗓️ 24 Jun 2026 00:00:00Reported by Positive TechnologiesType

ACE vulnerability in logback-core enables code execution via config or env var, requiring Janino and existing privileges.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by Logback vulnerabilities that could allow attackers to exploit conditional configuration file processing	15 Sep 202619:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by an arbitrary code execution vulnerability in Logback Core	21 Aug 202617:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	6 Aug 202607:35	–	ibm
IBM Security Bulletins	Security Bulletin: ACE vulnerability in conditional configuration file processing by QOS.CH logback-core	9 Sep 202621:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	8 Sep 202617:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	9 Feb 202611:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL	20 Aug 202623:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	23 Jan 202620:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to denial of service and loss of confidentiality due to several findings in Golang binaries	19 Dec 202515:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Optim 1.0.0, 1.1.0 and 1.2.0 impacted by vulnerabilities in glibc 2.34, netty-codec-http 4.1.x, ncurses 6.2, and net/http	21 Sep 202615:14	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2025-58188
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-19032
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-14683
osv	www.osv.dev/vulnerability/ghsa-x44p-gvrj-pj2r
osv	www.osv.dev/vulnerability/ghsa-563q-j3cm-6jxm
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-25681
osv	www.osv.dev/vulnerability/CVE-2025-61724
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54514
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-2332
osv	www.osv.dev/vulnerability/CVE-2026-41852

18 Sep 2026 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.18.6 - 9.8

CVSS 47

EPSS0.00568

SSVC