Security Bulletin: Bouncy Castle(bcprov and bcpg) security vulnerability in IBM FileNet Content Manager(FNCM) reported for FileNet Deployment Manager(FDM)

Summary IBM FileNet Content ManagerFNCM 5.7.0-IF6 addresses multiple Bouncy Castle CVEs reported for FileNet Deployment ManagerFDM Vulnerability Details CVEID:CVE-2026-12817 DESCRIPTION: In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This iss...

CVE-2026-39599

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

EUVD-2026-92953

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

CVE-2026-39599 WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

CVE-2026-39599

The WDS MCP Content Manager WordPress plugin affects versions

CVE-2023-43352-CMSmadesimple-SSTI--Content

CMSmadesimple SSTI v2.2.18 Autor: Sergio Descripción: Una vulnerabilidad de Server Side Template Injection SSTI en CMSmadesimple v.2.2.18 permite a un atacante local utilizar la sintaxis de plantilla nativa para inyectar un payload malicioso en una plantilla, que luego se ejecuta en el servidor...

CVE-2023-43359-CMSmadesimple-Stored-XSS----Content-Manager

CMSmadesimple XSS Almacenado v2.2.18 Autor: Sergio Descripción: Múltiples vulnerabilidades de cross-site scripting XSS en CMSmadesimple v.2.2.18 permiten a un atacante local ejecutar código arbitrario mediante un script manipulado en los datos Page Specific Metadata y Smarty del Menú de...

WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WDS MCP Content Manager versions = 3.10.4...

CVE-2026-97239

Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...

CVE-2026-97239 WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...

CVE-2026-97239 WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...

EUVD-2026-89903

Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...

CVE-2026-97239

The WordPress MCP Content Manager Lite plugin (versions

CVE-2026-97239: Missing Authorization

Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...

WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MCP Content Manager Lite versions = 1.1.0...

Security Bulletin: Eclipse parsson security vulnerability in IBM Content Cortex reported for BAI-EVENTS-JAVA-SDK

Summary Eclipse parsson CVE-2026-9563 security vulnerability in IBM Content Cortex. Affected and vulnerable. Vulnerability Details CVEID:CVE-2026-9563 DESCRIPTION: In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the...

Security Bulletin: Jackson databind security vulnerability in IBM Content Cortex reported for ACCE, GraphQL, External-Share

Summary Jackson databind CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518 security vulnerability in IBM Content Cortex. Affected and vulnerable Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose...

Cross-site Scripting (XSS)

Overview @strapi/content-manager is an A powerful UI to easily manage your data. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to insufficient sanitization of rendered rich text. An Author-role user can plant malicious tags in a rich text field, and when an Edit...

CVE-2026-90561

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an...

CVE-2026-90561 Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an...