PT-2026-82358

🗓️ 26 Aug 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 25 Views

Memory exhaustion DoS in Reactor Netty via HTTP/1.1 pipelined requests over one connection.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.8 or higher and 6.0.1.1 or higher	13 Aug 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cluster Export Services (CES) S3 are now addressed in 5.2.3.9 or higher and 6.0.1.0 or higher	24 Jul 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager - Multiple CVEs addressed related to SOLR and its dependencies (such as Jetty) affecting ODM-9.0.0 and older versions	19 Jun 202620:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to loss of confidentiality, denial of service and cross-site scripting	6 May 202613:02	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') (CVE-2026-2332)	16 Jun 202614:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes June 2026	29 Jun 202610:18	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	24 Sep 202614:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.	22 Sep 202607:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to issues in Jetty	3 Jun 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Verify Antenna is affected by multiple vulnerabilities	6 Oct 202614:22	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2025-58188
osv	www.osv.dev/vulnerability/CVE-2026-27142
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41707
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-39823
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-22732
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59296
osv	www.osv.dev/vulnerability/ghsa-x44p-gvrj-pj2r
osv	www.osv.dev/vulnerability/ghsa-563q-j3cm-6jxm
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-25681
osv	www.osv.dev/vulnerability/CVE-2026-56745

18 Sep 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.4 - 9.8

EPSS0.01305

SSVC

Reactor Netty Memory Exhaustion HTTP Pipelining Denial of Service HTTP Server