PT-2026-72882

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...

PT-2026-72883

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...

PT-2026-72151

The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to generic SQL Injection via the 'searchTerm' parameter in all versions up to, and including, 4.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existi...

CVE-2026-74247

A flaw was found in Red Hat Quay. A user with FEATUREBUILDSUPPORT enabled and repository write access can exploit a Server-Side Request Forgery SSRF vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network...

MINI-96J6-9VFP-J96Q

Bulletin has no description...

Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-10051, CVE-2026-6790, CVE-2026-8384, CVE-2026-10050, CVE-2026-59879, CVE-2026-59880)

Summary IBM Rational Developer for i is affected by a sensitive information exposure vulnerability in Eclipse Jetty-server CVE-2026-10051, an improper input validation vulnerability in Eclipse Jetty-server CVE-2026-6790, an authorization decision vulnerability in Eclipse Jetty-util CVE-2026-8384,...

MINI-RJQH-JPJ8-G5CH

Bulletin has no description...

MINI-6493-XMCM-VR5G

Bulletin has no description...

MINI-285P-GPFP-6W56

Bulletin has no description...

CVE-2026-49844 vulnerabilities

Vulnerabilities for packages: opensearch-fips, apache-hop, hadoop-fips, nacos, apache-tika, neo4j, druid, apache-activemq-artemis-fips, strimzi-kafka-operator-fips, airbyte-server-fips, solr, hono, kayenta, traccar, kafbat-ui, apache-jena-fuseki, apache-activemq, kafka-bridge-fips, airbyte-server...

MINI-W279-XHJ6-J78M

Bulletin has no description...

CVE-2026-18554

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-17182

CVE-2026-17182 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. It allows a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments (CWE-287). The vulnerability has a high impact: CVSS v3.1 base score 9.8 (...

CVE-2026-19639

An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope...

MINI-W34V-Q6JV-MC5R

Bulletin has no description...

CVE-2026-19639

CVE-2026-19639 is an Improper Access Control vulnerability affecting Tenable Security Center. The issue allows an authenticated non-administrative application user to view settings outside their assigned scope. Tenable’s advisory (TENABLE:20EF43...) indicates the fix is delivered with Security Ce...

EUVD-2026-58738

An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope...

CVE-2026-19639 Improper Access Control

An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope...

CVE-2026-19631 SQL Injection

A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials...

EUVD-2026-58733

A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials...