Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Bouncy Castle

Summary IBM App Connect Enterprise Toolkit and Runtime are vulnerable to multiple vulnerabilities due to Bouncy Castle. Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on al...

Security Bulletin: Multiple Security Vulnerabilities in Bouncy Castle affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed these security vulnerabilities CVE-2026-5588, CVE-2025-8916 , CVE-2025-14813, CVE-2026-5598, CVE-2026-0636, CVE-2026-3505. Vulnerability Details CVEID:CVE-2026-5588 DESCRIPTION: Use of a Broken or Risky Cryptographic...

CVE-2026-3161: Use of a Broken or Risky Cryptographic Algorithm

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2026-109839

IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm...

EUVD-2026-103023

IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm...

PT-2026-116000

IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm...

CVE-2026-18040

A flaw was found in Bouncy Castle. The Hamming Quasi-Cyclic HQC cryptographic algorithm leaks secret data through memory cache access patterns and execution timing variations during key encapsulation and decapsulation operations. A local attacker capable of monitoring cache activity or measuring...

CVE-2026-59116

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-99837

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-59116

Windows Remote Desktop is susceptible to a security feature bypass due to the use of a broken or risky cryptographic algorithm (CWE-327). An unauthorized attacker can exploit this flaw over a network to bypass specific security features. The vulnerability has a CVSS 3.1 score of 6.8 (Medium) , wi...

Windows Remote Desktop Security Feature Bypass Vulnerability

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-112043

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop affected versions not specified Description The use of a broken or risky cryptographic algorithm in Windows Remote Desktop enables an unauthorized attacker to bypass a security feature over a network. Recommendations At...

Microsoft Windows: CVE-2026-59116: Windows Remote Desktop Security Feature Bypass Vulnerability

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-59116: Use of a Broken or Risky Cryptographic Algorithm

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network...

Security Bulletin: IBM Guardium Key Lifecycle Manager is affected by a security vulnerability

Summary Security vulnerability has been addressed in IBM Guardium Key Lifecycle Manager Vulnerability Details CVEID:CVE-2026-78537 DESCRIPTION: IBM Guardium Key Lifecycle Manager could allow a local attacker to obtain sensitive information due to the use of a weak cryptographic algorithm...

Security Bulletin: Cross-site Scripting, HTML Injection and Use of Weak Cryptographic Algorithm vulnerabilities in IBM Cloud Pak System

Summary Cross-site Scripting, HTML Injection and Use of Weak Cryptographic Algorithm vulnerabilities were found in Cloud Pak SystemCVE-2026-3295, CVE-2023-38375, CVE-2026-3161,CVE-2026-4418. Those vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details...

CVE-2026-102824: Use of a Broken or Risky Cryptographic Algorithm

Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybridmlkem.rs accepts an all-zero 32-byte peer X25519 public key in both serverdh and computesharedsecret, forcing the X25519 contribution to the combined shared secre...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all core modules. This...

CVE-2026-18153: Use of a Broken or Risky Cryptographic Algorithm

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the use of hard-coded cryptographic keys and initialization vectors...

CVE-2025-33147: Use of a Broken or Risky Cryptographic Algorithm

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication...