PT-2026-82407

🗓️ 27 Aug 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 24 Views

Missing sameSite on cookies in Spring Framework WebFlux with Jetty 12 reactive adapter.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in spring-web	22 Oct 202620:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 2.0)	23 Oct 202606:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	11 Oct 202614:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in source-map.js, FasterXML jackson databind, and Bouncy Castle for Java in IBM Content Navigator and Content Cortex for Microsoft Office	2 Nov 202616:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs	12 Aug 202620:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2026.	5 Aug 202607:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Micrometer vulnerability that could allow Denial of Service (Dos) attacks	26 Jun 202618:37	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	6 Aug 202620:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jackson-databind affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	2 Nov 202614:04	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been detected in IBM Security Verify Governance Identity Manager Adapters	13 Jul 202606:22	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CLEANSTART-2026-SQ92018
osv	www.osv.dev/vulnerability/CVE-2026-39826
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-68121
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-1605
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-58186
osv	www.osv.dev/vulnerability/ghsa-rwm7-x88c-3g2p
osv	www.osv.dev/vulnerability/CVE-2026-42502
osv	www.osv.dev/vulnerability/CVE-2026-56624
osv	www.osv.dev/vulnerability/CVE-2026-59296
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54514

08 Oct 2026 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.5 - 9.8

EPSS0.00792

SSVC

Spring Framework WebFlux Cookie SameSite Jetty 12 Missing Attribute