PT-2026-84370

A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modify, and delete their own project...

Athena: Vulnerability-Affected Library Identification Via Knowledge Graph Completion

A single vulnerability in a widely used library can cascade through millions of dependent applications, yet more than half of vulnerability database entries contain missing or incorrect affected-library information. Existing automated approaches neglect the relational structure of vulnerability...

@3kles/3kles-socketio (>=2.1.5, <=2.4.1), @5minds/processcube_engine (>=16.0.0-alpha.2, <=18.0.0-renovate-fc9b99-lz9hhvt1) +253 more potentially affected by CVE-2026-59724 via engine.io (>=6.5.1, <=6.6.6)

engine.io NPM version =6.5.1, =2.1.5, =16.0.0-alpha.2, =2.17.13, =1.16.10, =3.0.4, =2.0.28, =1.1.5-13, =0.1.0, =0.1.0, =0.1.0, =1.2.0, =12.0.1, =17.0.0 and more Source cves: CVE-2026-59724 Source advisory: OSV:GHSA-GR94-W7QR-F4J3...

EUVD-2026-68791

Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...

CVE-2026-42588

A flaw was found in Apache ActiveMQ. An authenticated attacker can exploit an improper input validation vulnerability in the Jolokia JMX-HTTP bridge. By crafting a malicious discovery URI, the attacker can trigger the VM transport's brokerConfig parameter to load a Spring XML application context...

MINI-MF6V-RPXW-6GJC

Bulletin has no description...

BELL-CVE-2026-80588 CVE-2026-80588 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-80582 CVE-2026-80582 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-80544 CVE-2026-80544 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-80523 CVE-2026-80523 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-74751 CVE-2026-74751 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-74749 CVE-2026-74749 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-52491 CVE-2026-52491 does not affect BellSoft software

Bulletin has no description...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-55855 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-55855 Source advisory: OSV:GHSA-G5XC-5W98-JFVM...

@aliceo2/infologger (>=1.15.0, <=1.15.1), @eventualize/mysql-storage-adapter (6.2.0) +16 more potentially affected by CVE-2026-55215 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =0.63.0, =0.95.0, =0.4.1, =0.23.2, =2.1.8, =2.3.2 and more Source cves: CVE-2026-55215 Source advisory: OSV:GHSA-CQHC-2H57-WPXF...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to Cryptographic Weakness in IBM Liberty Server ( CVE-2020-36732)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the cryptographic weakness vulnerability Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an intege...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper (CVE-2025-58457)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper Vulnerability Details CVEID:CVE-2025-58457 DESCRIPTION: Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and resto...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to an access control vulnerability in AFT web app ( CVE-2026-1264 )

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed access control security vulnerability Vulnerability Details CVEID:CVE-2026-1264 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.51, 6.2.1.0 throu...

GHSA-MCJ4-MPHF-J9FF vulnerabilities

Vulnerabilities for packages: kubescape, kubescape-server-fips, kubescape-server, cloudbeat-fips, cloudbeat...

Security Bulletin: Security Vulnerability in commons-lang affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-48924)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to commons-lang library. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with...