Security Bulletin: Security Vulnerability in commons-lang affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-48924)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to commons-lang library. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with...

CVE-2026-78187

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

CVE-2026-78187

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

EUVD-2026-64723

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

CVE-2026-78187 Piwigo Public Authentication cross site scripting

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

CVE-2026-78187 Piwigo Public Authentication cross site scripting

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

CVE-2026-78187 Piwigo Public Authentication cross site scripting

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

CVE-2026-78187

CVE-2026-78187 is a reflected cross-site scripting (XSS) vulnerability in Piwigo 16.3.0 , affecting the Public Authentication Page component. Manipulation of the lang argument allows a remote, unauthenticated attacker to inject script that executes in a victim's browser upon user interaction. The...

CVE-2026-78187: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

PT-2026-79823

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

PT-2026-85185

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. load lang ngrams joins the corpus root with crubadan code, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener...

OPENSUSE-SU-2026:11525-1 rustup-1.29.0~0-1.1 on GA media

These are all security issues fixed in the rustup-1.29.00-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2025-3838 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2020-0036 vulnerabilities

Vulnerabilities for packages: dex-k8s-authenticator, k3d...

GO-2025-4233 vulnerabilities

Vulnerabilities for packages: coredns, k3s, buf, kubernetes-dns-node-cache-fips, traefik, kubernetes-dns-node-cache, k8sgateway, kubo, seaweedfs, teleport, seaweedfs-fips, kargo, spegel-fips, dkron-fips, caddy, ipfs-cluster, syncthing-fips, eks-distro, ipfs-cluster-fips, kubo-fips, k8sgateway-fip...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: spire-server, newrelic-infrastructure-agent, envoy-gateway, opentelemetry-collector, pulumi, nerdctl, podman, zot, grafana-alloy, opentelemetry-operator, grafana, trivy-operator, datadog-agent, wolfictl, traefik, rancher-agent, portieris, trivy, cluster-api, k8sgpt,...

CVE-2026-16987

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper validation of the LANG environment variable...

EUVD-2026-58385

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper validation of the LANG environment variable...

CVE-2026-16987 IBM i is Affected By An Improper Validation Vulnerability in PASE []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper validation of the LANG environment variable...

CVE-2026-16987: External Control of File Name or Path

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper validation of the LANG environment variable...