OESA-2026-4533 tomcat security update

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Security Fixes: A missing critical step in...

OESA-2026-4534 tomcat security update

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Security Fixes: A missing critical step in...

OESA-2026-4532 tomcat security update

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Security Fixes: A missing critical step in...

OESA-2026-4531 tomcat security update

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Security Fixes: A missing critical step in...

PT-2026-132485

Not Failing Securely 'Failing Open' vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. This issue affects Apache Tomcat: from...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a 'Failing Open' issue in pgjdbc PostgreSQL JDBC Driver (CVE-2026-54291)

Summary IBM Watson Speech Services Cartridge is vulnerable to a 'Failing Open' issue in pgjdbc PostgreSQL JDBC Driver. This is due to a flaw which allows channelBinding=require connections to be silently downgraded from SCRAM-SHA-256-PLUS with channel binding to plain SCRAM-SHA-256 without it,...

SUSE CVE-2026-74048

Not Failing Securely 'Failing Open' vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. This issue affects Apache Tomcat: from...

CVE-2026-114479

Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are vulnerable to a Not Failing Securely (CWE-636) flaw in the anti-virus attachment-stripping action. When virus scanning is enabled with the action set to remove attachments and deliver text, the server fails to handle messages consisti...

CVE-2026-114479 Not Failing Securely ('Failing Open') in hMailServer

Not failing securely in the anti-virus attachment-stripping action of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have a message that the server's virus scanner found infected delivered to the recipient's mailbox unchanged. With virus scanning...

CVE-2026-114479 Not Failing Securely ('Failing Open') in hMailServer

Not failing securely in the anti-virus attachment-stripping action of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have a message that the server's virus scanner found infected delivered to the recipient's mailbox unchanged. With virus scanning...

Linux Distros Unpatched Vulnerability : CVE-2026-74048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Not Failing Securely 'Failing Open' vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails,...

DEBIAN-CVE-2026-74048

Not Failing Securely 'Failing Open' vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. This issue affects Apache Tomcat: from...

UBUNTU-CVE-2026-74048

Not Failing Securely 'Failing Open' vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. This issue affects Apache Tomcat: from...

CVE-2026-74048

Not Failing Securely 'Failing Open' vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. This issue affects Apache Tomcat: from...

CVE-2026-74048

Not Failing Securely 'Failing Open' vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. This issue affects Apache Tomcat: from...

CVE-2026-78022

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely 'Failing Open' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-78022

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely 'Failing Open' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

EUVD-2026-95573

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely 'Failing Open' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-78022

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to a Not Failing Securely ('Failing Open') condition. This flaw occurs when a security control fails in a manner that permits access rather than denying it. A low privileged attacker with remote access co...

CVE-2026-78022

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely 'Failing Open' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...