PT-2026-82407

🗓️ 27 Aug 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 20 Views

Missing sameSite on cookies in Spring Framework WebFlux with Jetty 12 reactive adapter.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	11 Oct 202614:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	1 Dec 202516:17	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Spring WebFlux, IBM Sterling Control Center is vulnerable to multiple CVEs (CVE-2026-47883, CVE-2026-47885, CVE-2026-47889, CVE-2026-47891 )	5 Oct 202619:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Certificate Validation in crypto/x509 [CVE-2025-58188]	14 Apr 202616:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	23 Jan 202620:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilties in DevOps Test Hub	14 Oct 202616:29	–	ibm
IBM Security Bulletins	Security Bulletin: Certificate Name Constraints Algorithm Vulnerable to Non-Linear Processing DoS affects watsonx.data	8 Apr 202606:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	24 Mar 202606:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to denial of service and loss of confidentiality due to several findings in Golang binaries	19 Dec 202515:28	–	ibm
IBM Security Bulletins	Security Bulletin: Spring Framework (spring-web) ‚Äî Open Redirect, Resource Exhaustion, Missing SameSite Cookie Attribute, and XML Memory Limit Bypass	17 Sep 202620:30	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-33870
osv	www.osv.dev/vulnerability/CVE-2026-39824
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-39825
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-47856
osv	www.osv.dev/vulnerability/CVE-2026-25680
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54514
osv	www.osv.dev/vulnerability/CVE-2026-10051
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-3505
osv	www.osv.dev/vulnerability/ghsa-cvc6-q2cp-2xhw
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-58186

06 Oct 2026 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.00428

SSVC

Spring Framework WebFlux Cookie SameSite Jetty 12 Missing Attribute