PT-2026-82347

🗓️ 26 Aug 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 52 Views

Reactor Netty 1.3.6 and earlier may incorrectly evaluate remote IP with HAProxy Protocol enabled.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in jackson-databind-2.16.0.jar	15 Sep 202620:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in jackson-databind [CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515]	24 Aug 202622:10	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been detected in IBM Security Verify Governance Identity Manager Adapters	13 Jul 202606:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.	25 Jul 202616:37	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.8 or higher and 6.0.1.1 or higher	13 Aug 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in jackson-databind may affect IBM APM Linux KVM Agent for Virtual Environments.	4 Aug 202608:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager - Multiple CVEs addressed related to SOLR and its dependencies (such as Jetty) affecting ODM-9.0.0 and older versions	19 Jun 202620:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs	12 Aug 202620:39	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') (CVE-2026-2332)	16 Jun 202614:11	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in jackson-databind	30 Jul 202618:43	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2025-58188
osv	www.osv.dev/vulnerability/CVE-2026-27142
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41707
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-39823
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-22732
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59296
osv	www.osv.dev/vulnerability/ghsa-x44p-gvrj-pj2r
osv	www.osv.dev/vulnerability/ghsa-563q-j3cm-6jxm
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-25681
osv	www.osv.dev/vulnerability/CVE-2026-56745

18 Sep 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.4 - 9.8

EPSS0.01305

SSVC

Reactor Netty HAProxy Protocol Remote IP Address HTTP Server Informational Severity