Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple D.o.S. issues in Micrometer [CVE-2026-40983, CVE-2026-40984]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple D.o.S. issues in Micrometer due to issues in CVE-2026-40983, CVE-2026-40984. Micrometer is used in our speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerabili...

Important: Red Hat Security Advisory: Red Hat Data Grid 8.6.2 security update

An update for Red Hat Data Grid 8 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

K000162297: Micrometer vulnerability CVE-2026-40984

Security Advisory Description In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18; 1.9...

CVE-2026-40984

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18; 1.9.0 through 1.9.17...

CVE-2026-40984

creationtimestamp| type| source ---|---|--- 2026-06-08 07:18:37+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-558 2026-06-08 13:20:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnrrjhm3tl25 2026-06-09 09:00:50+00:00| seen|...

cve-2026-40984 - HIGH - Micrometer HTTP server instrumentations DoS vulnerability

cve-2026-40984 - HIGH - Micrometer HTTP server instrumentations DoS vulnerability...

io.javalin:javalin-micrometer (=7.0.0-alpha.3) potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty12 (=1.14.2)

io.micrometer:micrometer-jetty12 MAVEN version =1.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-jetty12 and may be impacted: - io.javalin:javalin-micrometer =7.0.0-alpha.3 Source cves: CVE-2026-40984 Source advisory:...