PT-2026-63550

🗓️ 07 Jul 2026 00:00:00Reported by Positive TechnologiesType

Netty HAProxy V1 encoder allows CRLF injection via UNIX addresses, enabling PROXY header split and IP spoofing.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	20 Aug 202615:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	23 Sep 202622:10	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability is addressed in IBM Daeja ViewONE as part of iFix release in August 2026	27 Aug 202610:34	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Bouncy Castle for Java, IBM Sterling Control Center is vulnerable to Uncontrolled Recursion(CVE-2026-59645)	22 Sep 202610:03	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	28 Aug 202605:59	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	16 Sep 202606:03	–	ibm
IBM Security Bulletins	Security Bulletin: Uncontrolled resource consumption, cross-site scripting, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	29 Sep 202600:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Bouncy Castle	16 Sep 202607:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Global Availability Mailbox is affected by a vulnerability in bouncy castle 1.84	16 Sep 202612:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty	19 Aug 202618:05	–	ibm

Source	Link
ubuntu	www.ubuntu.com/security/CVE-2026-59919
osv	www.osv.dev/vulnerability/openSUSE-SU-2026:11394-1
suse	www.suse.com/security/cve/CVE-2026-56746
suse	www.suse.com/support/update/announcement/2026/suse-su-20263482-1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41852
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-2332
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54514
osv	www.osv.dev/vulnerability/CVE-2026-41851
osv	www.osv.dev/vulnerability/CVE-2026-41852
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-12185

18 Sep 2026 00:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.5 - 7.5

CVSS 48.7

EPSS0.00493

SSVC