PT-2026-82694

🗓️ 27 Aug 2026 00:00:00Reported by Positive TechnologiesType

SpEL safety guard bypass in Spring Framework 5.2-7.0 via SimpleEvaluationContext with compiler.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	4 Sep 202622:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.1	1 Oct 202610:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities reported in netty-codec-4.1.135.Final.jar for APIM	4 Oct 202617:06	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cluster Export Services (CES) S3 are now addressed in 5.2.3.9 or higher and 6.0.1.0 or higher	24 Jul 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	1 Dec 202516:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-codec-http-4.1.135.Final.jar	15 Sep 202620:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes June 2026	29 Jun 202610:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.	22 Sep 202607:14	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Spring Expression Language (SpEL), IBM Sterling Control Center is vulnerable to Improper Control of Dynamically-Managed Code Resources (CVE-2026-59283)	5 Oct 202619:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Verify Antenna is affected by multiple vulnerabilities	6 Oct 202614:22	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2025-58188
osv	www.osv.dev/vulnerability/CVE-2026-27142
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41707
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-39823
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-22732
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59296
osv	www.osv.dev/vulnerability/ghsa-x44p-gvrj-pj2r
osv	www.osv.dev/vulnerability/ghsa-563q-j3cm-6jxm
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-25681
osv	www.osv.dev/vulnerability/CVE-2026-56745

18 Sep 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5 - 9.8

CVSS 48.7

EPSS0.0063

SSVC