PT-2026-54936

🗓️ 02 Jul 2026 00:00:00Reported by Positive TechnologiesType

Eclipse Parsson before 1.1.8 allowed unbounded JSON parsing, enabling DoS; 1.1.8 adds a 15 million character limit.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a denial of service vulnerability due to Eclipse Parsson (CVE-2026-9563)	9 Jul 202618:04	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in jackson-databind-2.16.0.jar	15 Sep 202620:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in jackson-databind [CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515]	24 Aug 202622:10	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Netty IBM webMethods Managed File Transfer is vulnerable to Improper Access Control and Allocation of Resources without Limits or Throttling	6 Aug 202613:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a denial of service vulnerability due to Eclipse Parsson (CVE-2026-9563)	5 Aug 202606:36	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been detected in IBM Security Verify Governance Identity Manager Adapters	13 Jul 202606:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.	25 Jul 202616:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability found in parsson-1.0.5.jar - In IBM webMethods APIM	15 Sep 202607:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in WebSphere Application Server Liberty affect Cloud Pak System Pattern Type	24 Aug 202610:49	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41694
osv	www.osv.dev/vulnerability/CVE-2026-41850
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59645
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54665
osv	www.osv.dev/vulnerability/CVE-2026-41711
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59900
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-0636
osv	www.osv.dev/vulnerability/CVE-2026-54516
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-45536
osv	www.osv.dev/vulnerability/ghsa-c2gf-v879-257j

29 Sep 2026 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.5 - 9.8

EPSS0.0063

SSVC