CVE-2026-11540 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-11540

IBM WebSphere Application Server versions 9.0 and 8.5 (prior to 9.0.5.29 and 8.5.5.31 ) contain an information disclosure vulnerability in the FileTransfer servlet , allowing a remote attacker with no privileges or user interaction to obtain sensitive information about the file system. The CVSS 3...

CVE-2026-93753

creationtimestamp| type| source ---|---|--- 2026-09-18 19:03:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7fbnbb2gmpxdb 2026-09-18 20:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxjbtb2e22 2026-09-22 10:10:33+00:00| seen|...

CVE-2026-29607

creationtimestamp| type| source ---|---|--- 2026-09-18 18:48:40+00:00| seen| https://gist.github.com/jtomaszon/053ae1d85f689952717574dd2ae0da96 2026-09-18 19:11:19+00:00| seen| https://gist.github.com/jtomaszon/dee3171f25478f317848bf753f8e48a7...

CVE-2026-82020

creationtimestamp| type| source ---|---|--- 2026-09-18 18:48:40+00:00| seen| https://gist.github.com/jtomaszon/053ae1d85f689952717574dd2ae0da96 2026-09-18 19:11:19+00:00| seen| https://gist.github.com/jtomaszon/dee3171f25478f317848bf753f8e48a7...

CVE-2026-9354

creationtimestamp| type| source ---|---|--- 2026-09-18 18:48:40+00:00| seen| https://gist.github.com/jtomaszon/053ae1d85f689952717574dd2ae0da96 2026-09-18 19:11:19+00:00| seen| https://gist.github.com/jtomaszon/dee3171f25478f317848bf753f8e48a7...

CVE-2026-90413

creationtimestamp| type| source ---|---|--- 2026-09-18 18:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvssxcqil52j...

DEBIAN-CVE-2026-93748

http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to...

DEBIAN-CVE-2026-93750

http-cache-semantics through 4.2.0 contains a cache validation vulnerability in the varyMatches function that fails to properly validate Vary header wildcards due to byte-for-byte string comparison. Attackers can request URLs previously fetched by other clients to receive cached responses intende...

CVE-2026-93748

http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to...

DEBIAN-CVE-2026-92768

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...

CVE-2026-93748

http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to...

CVE-2026-93750

http-cache-semantics through 4.2.0 contains a cache validation vulnerability in the varyMatches function that fails to properly validate Vary header wildcards due to byte-for-byte string comparison. Attackers can request URLs previously fetched by other clients to receive cached responses intende...

CVE-2026-93760

creationtimestamp| type| source ---|---|--- 2026-09-18 18:17:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/az2jn65gliwr6 2026-09-18 20:02:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxkugfof2z 2026-09-25 05:07:08+00:00| seen|...

CVE-2026-81178

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.55, an unauthenticated holder of a public note share link receives project-wide collaborative editing metadata because the public share consumer joins the same collaboration group as authenticated project members and...

CVE-2026-93761

creationtimestamp| type| source ---|---|--- 2026-09-18 18:15:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/alghf3pafebby 2026-09-18 20:02:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxl3vg7l2k 2026-09-25 04:37:07+00:00| seen|...

CVE-2026-90110

creationtimestamp| type| source ---|---|--- 2026-09-18 18:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvsrbp4qmz22...

CVE-2025-15399

creationtimestamp| type| source ---|---|--- 2026-09-18 18:07:34+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvsr565gpy2n 2026-09-18 20:58:17+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mvt2ohairs2e 2026-09-18 21:00:08+00:00| seen|...

CVE-2026-91149

creationtimestamp| type| source ---|---|--- 2026-09-18 18:03:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsquyx7w62m...

CVE-2026-93765

creationtimestamp| type| source ---|---|--- 2026-09-18 18:02:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsqurpkvk2k 2026-09-18 18:03:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jzx6i4exkhcn2...