PT-2026-82693

🗓️ 27 Aug 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 32 Views

DoS in Spring Framework data binding via user-supplied property paths applied to target objects.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in spring-web	22 Oct 202620:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 2.0)	23 Oct 202606:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	11 Oct 202614:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in source-map.js, FasterXML jackson databind, and Bouncy Castle for Java in IBM Content Navigator and Content Cortex for Microsoft Office	2 Nov 202616:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs	12 Aug 202620:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jackson-databind affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	2 Nov 202614:04	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been detected in IBM Security Verify Governance Identity Manager Adapters	13 Jul 202606:22	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in crypto affects IBM Netezza Appliance	12 Aug 202609:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	8 Sep 202615:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DoS in Spring Framework (CVE-2026-59282)	26 Oct 202617:26	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-39826
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-68121
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-59282
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-58186
osv	www.osv.dev/vulnerability/ghsa-rwm7-x88c-3g2p
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-1605
osv	www.osv.dev/vulnerability/CVE-2026-42502
osv	www.osv.dev/vulnerability/CVE-2026-56624
osv	www.osv.dev/vulnerability/CVE-2026-59296
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54514

08 Oct 2026 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15.3 - 7.5

EPSS0.00591

SSVC

Spring Framework Denial of Service data binding property paths user-supplied input