CVE-2026-75754: Missing Authentication for Critical Function

Missing Authentication for Critical Function, Server-Side Request Forgery SSRF, and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in wi...

PT-2026-85382

Name of the Vulnerable Software and Affected Versions ASUS Control Center Enterprise versions 0 through 4.0.0.2 Description An issue involving missing authentication for critical functions, Server-Side Request Forgery SSRF, and the use of hard-coded credentials allows an unauthenticated network...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jetty-server jar (CVE-2026-10051, CVE-2026-6790)

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-10051 and CVE-2026-6790 reported for jetty-server-12.0.25.jar Vulnerability Details CVEID:CVE-2026-10051 DESCRIPTION: In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026 CPU

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-41254, CVE-2026-47057, CVE-2026-47063, CVE-2026-47058, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027, CVE-2026-47021, CVE-2026-46917, CVE-2026-47059, CVE-2026-47010, CVE-2026-16439, CVE-2026-16441, CVE-2026-1624...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in jetty-ee8-security jar (CVE-2026-10050)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-10050 reported for jetty-ee8-security-12.0.25.jar Vulnerability Details CVEID:CVE-2026-10050 DESCRIPTION: In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jackson-core jar (CVE-2026-18401, CVE-2026-68494)

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-18401 and CVE-2026-68494 reported for jackson-core-2.17.1.jar Vulnerability Details CVEID:CVE-2026-18401 DESCRIPTION: The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in httpcore5 jar (CVE-2026-54399)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-54399 reported for httpcore5-5.3.6.jar Vulnerability Details CVEID:CVE-2026-54399 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core 5.4.2 and earlier...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in httpcore5-h2 jar (CVE-2026-54428)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-54428 reported for httpcore5-h2-5.3.6.jar. Vulnerability Details CVEID:CVE-2026-54428 DESCRIPTION: Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5.4.2 and...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jackson-databind jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515 reported for jackson-databind-2.17.1.jar Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all-5.19.0.jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilitiesCVE-2026-49432, CVE-2026-49434, CVE-2026-50734, CVE-2026-53916, CVE-2026-53917, CVE-2026-54475 reported for activemq-all-5.19.0.jar. Vulnerability Details CVEID:CVE-2026-49432 DESCRIPTION: Improper Input Validation...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in jasperreports jar (CVE-2026-6009)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-6009 reported for jasperreports-7.0.2.jar. Vulnerability Details CVEID:CVE-2026-6009 DESCRIPTION: Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-42253, CVE-2026-42588, CVE-2026-45505, CVE-2026-46605, CVE-2026-49157, CVE-2026-49270 reported for activemq-all-5.19.0.jar Vulnerability Details CVEID:CVE-2026-42253 DESCRIPTION: Improper Neutralization of Input...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in spring-core jar (CVE-2026-41848)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-41848 reported for spring-core-6.2.12.jar, spring-core-6.2.18.jar . Vulnerability Details CVEID:CVE-2026-41848 DESCRIPTION: Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-expression jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-41850, CVE-2026-41851 and CVE-2026-41852 reported for spring-expression-6.2.12.jar, spring-expression-6.2.18.jar . Vulnerability Details CVEID:CVE-2026-41850 DESCRIPTION: Applications that evaluate user-supplied...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-hateoas jar (CVE-2026-41006, CVE-2026-41007)

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-41006 and CVE-2026-41007 reported for spring-hateoas-2.4.1.jar, spring-hateoas-2.5.2.jar . Vulnerability Details CVEID:CVE-2026-41006 DESCRIPTION: Spring HATEOAS's internal PropertyUtils.createObjectFromPropertie...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-security-core jar (CVE-2026-40988, CVE-2026-41694)

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-40988 and CVE-2026-41694 reported for spring-security-core-6.4.12.jar, spring-security-core-6.5.10.jar. Vulnerability Details CVEID:CVE-2026-40988 DESCRIPTION: An application using...

Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in spring-webmvc jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846 reported for spring-webmvc-6.2.12.jar and spring-webmvc-6.2.18.jar. Vulnerability Details CVEID:CVE-2026-41841 DESCRIPTION: Spring MVC and...

CVE-2026-9492

The MBStorage DRAM lighting control module within Gigabyte Control Center GCC developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIOx64.sys bundled with the module, thereby arbitrari...

CVE-2026-9492 GIGABYTE｜Gigabyte Control Center - Improper Access Control

The MBStorage DRAM lighting control module within Gigabyte Control Center GCC developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIOx64.sys bundled with the module, thereby arbitrari...

CVE-2026-9492

CVE-2026-9492 affects Gigabyte Control Center (GCC) MBStorage DRAM lighting control module. The vulnerability resides in the MyPortIO_x64.sys driver, where improper access control allows authenticated local attackers to issue IOCTL commands that can read and write physical memory, leading to kern...