PT-2026-70917

🗓️ 11 Aug 2026 00:00:00Reported by Positive TechnologiesType

Async HttpClient ignores HostnameVerificationPolicy#BUILTIN, enabling certificate impersonation via MITM.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Due to the use of Apache HttpComponents Client 5.4, IBM Sterling Control Center is vulnerable to Improper Certificate Validation (CVE-2026-71290)	22 Sep 202610:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in jackson-databind-2.16.0.jar	15 Sep 202620:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jackson-databind affects DB2 Dev Extension (CVE-2026-59888, CVE-2026-59889)	17 Sep 202619:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for August 2026	31 Aug 202610:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.	25 Jul 202616:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	11 Oct 202614:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty,jackson-databind,Angular,bootstrap,React Router,decode-uri-component,Reactor Netty,Spring WebFlux,Spring Framework,spring-web might affect IBM Storage Defender Copy Data Management	30 Sep 202617:17	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.8 or higher and 6.0.1.1 or higher	13 Aug 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in bcpkix-jdk18on jar	17 Sep 202612:55	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cluster Export Services (CES) S3 are now addressed in 5.2.3.9 or higher and 6.0.1.0 or higher	24 Jul 202615:52	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-39826
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-66021
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-1605
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41848
osv	www.osv.dev/vulnerability/CVE-2026-56624
osv	www.osv.dev/vulnerability/CVE-2026-12802
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-13006
osv	www.osv.dev/vulnerability/ghsa-qqpg-mvqg-649v
osv	www.osv.dev/vulnerability/CVE-2026-59888
osv	www.osv.dev/vulnerability/CVE-2025-47911

08 Oct 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 3.17.5 - 9.1

CVSS 48.7

EPSS0.01305

SSVC