PT-2026-68463

🗓️ 06 Aug 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 5 Views

Incomplete fix in Apache CXF allows DoS via excessive attachment headers.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.1	1 Oct 202610:04	–	ibm
IBM Security Bulletins	Security Bulletin: Updating IBM WebSphere Liberty Profile in Identity Insight for security update	10 Sep 202619:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)	27 Aug 202606:31	–	ibm
IBM Security Bulletins	Security Bulletin: : IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Sep 202606:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest	24 Aug 202616:35	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in IBM WebSphere Application Server Liberty affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak	9 Oct 202619:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	9 Sep 202604:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)	17 Aug 202617:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to jackson-databind (CVE-2026-19032, CVE-2026-83557 and CVE-2026-68497)	29 Sep 202606:13	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)	14 Aug 202607:20	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-18401
osv	www.osv.dev/vulnerability/CVE-2026-71290
osv	www.osv.dev/vulnerability/CLEANSTART-2026-MP19822
t	www.t.me/CVEtracker/62550
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MP19822.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-19032
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-57819
osv	www.osv.dev/vulnerability/ghsa-r7wm-3cxj-wff9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-83557
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

18 Sep 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.3 - 7.5

EPSS0.00664

SSVC

Apache CXF denial of service attachment headers