Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses undici which is vulnerable to CVE-2026-11525, CVE-2026-12151, CVE-2026-6733, CVE-2026-9679

Summary IBM Maximo Application Suite - Visual Inspection component uses undici which is vulnerable to CVE-2026-11525, CVE-2026-12151, CVE-2026-6733, CVE-2026-9679, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-11525...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: saf, npm, code-server, renovate, prism, vitess, node-gyp...

CVE-2026-9679

creationtimestamp| type| source ---|---|--- 2026-06-17 16:59:18+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moirxg7wts2g 2026-06-18 15:59:05+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72nba3o2f 2026-06-23 12:01:41+00:00| seen|...

CVE-2026-9679

undici vulnerability CVE-2026-9679 affects the cookie parsing paths (parseSetCookie, parseCookie, getSetCookies). The cookie parser percent-decodes values (via qsUnescape), turning sequences like %0D%0A, %00, %3B, and %3D into literal bytes. RFC 6265 §5.4 does not require decoding and browsers do...