PT-2026-57996

🗓️ 14 Jul 2026 00:00:00Reported by Positive TechnologiesType

Jetty may return an unresolved path for URIs like /public;/../admin/secret.txt, confusing apps expecting a resolved path.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cluster Export Services (CES) S3 are now addressed in 5.2.3.9 or higher and 6.0.1.0 or higher	24 Jul 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-10051, CVE-2026-6790, CVE-2026-8384, CVE-2026-10050, CVE-2026-59879, CVE-2026-59880)	14 Aug 202622:21	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in crypto affects IBM Netezza Appliance	12 Aug 202609:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	8 Sep 202617:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to unauthorized access or information disclosure due to Jetty (CVE-2026-8384)	14 Sep 202618:15	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in net	2 Jul 202612:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL	20 Aug 202623:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BigMemory Max is affected by Jetty vulnerabilities that could allow attackers to bypass security filters in downstream web applications.	19 Aug 202614:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (June 2026 - Part 2 of 2)	7 Jul 202607:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM Operator for PostgreSQL	10 Jul 202615:05	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2025-58188
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-19032
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-14683
osv	www.osv.dev/vulnerability/ghsa-x44p-gvrj-pj2r
osv	www.osv.dev/vulnerability/ghsa-563q-j3cm-6jxm
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-25681
ubuntu	www.ubuntu.com/security/CVE-2026-8384
osv	www.osv.dev/vulnerability/CVE-2025-61724
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54514
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-2332

18 Sep 2026 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.3 - 9.8

EPSS0.00591

SSVC