PT-2026-7016

🗓️ 01 Jan 2026 00:00:00Reported by Positive TechnologiesType

Apache Shiro auth bypass for static files on case-insensitive filesystems; brute force could reveal valid usernames.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for December 2025 - Multiple CVEs addressed	29 Jan 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: SSRF Vulnerability in QOS.CH Logback via Malicious DOCTYPE in XML Config (v0.1–1.3.14, 1.4.0–1.5.12)	23 Jul 202510:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	6 Feb 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in netty-codec-4.1.124.Final.jar, netty-codec-http-4.1.108.Final.jar, netty-codec-http2-4.1.124.Final.jar affecting MongoDB Enterprised Advanced (CVE-2025-58056, CVE-2025-58057, CVE-2025-67735)	24 Feb 202619:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Asset Data Dictionary uses multiple third party dependencies which is vulnerable to CVEs.	6 Feb 202505:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Security QRadar EDR Software	27 Nov 202512:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM DB2 shipped with IBM WebSphere Remote Server	10 Feb 202603:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	1 Dec 202516:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition (ITNM).	29 May 202515:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is affected by a vulnerability in netty-codec, netty-codec-http and netty-codec-http2 (CVE-2025-58056, CVE-2025-58057, CVE-2025-55163)	29 Jan 202615:17	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/ghsa-4g8c-wm8x-jfhw
osv	www.osv.dev/vulnerability/ghsa-mf9v-mfxr-j63j
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-48734
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-34462
osv	www.osv.dev/vulnerability/CVE-2022-41854
osv	www.osv.dev/vulnerability/CLEANSTART-2026-GH89210
osv	www.osv.dev/vulnerability/ghsa-gc5v-m9x4-r6x2
osv	www.osv.dev/vulnerability/ghsa-25qh-j22f-pwp8
lists	www.lists.apache.org/thread/mm1jct9b86jvnh3y44tj22xvjtx3xhhh
osv	www.osv.dev/vulnerability/CVE-2025-11143

18 Sep 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.12.5 - 7.5

CVSS 46.9

EPSS0.00601

SSVC