PT-2026-84864

🗓️ 02 Sep 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 30 Views

Port injection in fast-uri allows authority delimiter injection pointing to attacker host.

Reporter	Title	Published	Views	Family All 304
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Integration are vulnerable to multiple vulnerabilities in fast-uri	19 Oct 202611:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in fast-uri (CVE-2026-84292, CVE-2026-84394)	15 Oct 202620:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in fast-uri (CVE-2026-84292)	27 Oct 202605:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to multiple vulnerabilities	1 Oct 202609:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Suite Software includes components with multiple known vulnerabilities	5 Nov 202611:01	–	ibm
IBM Security Bulletins	Security Bulletin: Automation Assets in IBM Integration is vulnerable to multiple vulnerabilities in fast-uri	20 Oct 202610:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.	3 Nov 202620:26	–	ibm
IBM Security Bulletins	Security Bulletin: vulnerability in fast-uri URI parser for Node.js.	23 Oct 202621:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities	3 Nov 202611:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in fast-uri (CVE-2026-84292, CVE-2026-84394, CVE-2026-86472)	26 Oct 202620:34	–	ibm

Source	Link
github	www.github.com/fastify/fast-uri/commit/820e8478dd7da3d09f187bfaf35d50b71f67b8b4
bugzilla	www.bugzilla.redhat.com/2527747
osv	www.osv.dev/vulnerability/CVE-2026-84292
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2026-84292
access	www.access.redhat.com/security/cve/CVE-2026-75899
github	www.github.com/fastify/fast-uri/releases/tag/v3.1.7
access	www.access.redhat.com/security/cve/CVE-2026-75975
osv	www.osv.dev/vulnerability/GHSA-qw65-cvwx-89v3
github	www.github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3
bugzilla	www.bugzilla.redhat.com/2521778

20 Oct 2026 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.00239

SSVC

fast-uri port injection authority delimiter host spoofing unvalidated input