2151 matches found
CVE-2026-11536 IBM WebSphere Application Server is affected by a remote code execution vulnerability
IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector...
CVE-2026-11536
CVE-2026-11536 affects IBM WebSphere Application Server versions including 8.5 and 9.0 (SOAP/JMX connector). Connected documents confirm an RCE vulnerability via the SOAP/JMX/HTTP interface with CWE-502 (Deserialization of Untrusted Data) and IBM CVSS data (up to 8.8 base score in some bulletins;...
CVE-2026-47858
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Thei...
CVE-2026-47873 Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces 0.0.0.0 rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier...
CVE-2026-47873 Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces 0.0.0.0 rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier...
CVE-2026-47858 live information startup mode is vulnerable for remote code execution
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Thei...
CVE-2026-47858 live information startup mode is vulnerable for remote code execution
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Thei...
CVE-2026-47858 live information startup mode is vulnerable for remote code execution
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Thei...
CVE-2026-11536: Deserialization of Untrusted Data
IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector...
CVE-2026-47858: Missing Authentication for Critical Function
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Thei...
cve-2026-47858 - HIGH - CVE-2026-47858: live information startup mode is vulnerable for remote code execution
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. This affects the live information feature across all environments Eclipse, Visual Studio Code, Theia, Cursor except the...
Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is affected by a remote code execution vulnerability (CVE-2026-11536)
Summary IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by a remote code execution vulnerability in the SOAP/JMX connector. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...
Security Bulletin: IBM WebSphere Application Server is affected by a remote code execution vulnerability (CVE-2026-11536)
Summary IBM WebSphere Application Server is affected by a remote code execution vulnerability in the SOAP/JMX connector. Vulnerability Details CVEID:CVE-2026-11536 DESCRIPTION: IBM WebSphere Application Server is affected by a remote code execution vulnerability in the SOAP/JMX connector...
OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI
Summary Description A Deserialization of Untrusted Data CWE-502 issue in OpenDJ's JMX RMI connector allows an unauthenticated remote attacker to deserialize arbitrary Java objects on the server. The vulnerability exists because the platform reads and processes attacker-controlled bytes prior to...
GHSA-43X2-G84Q-FMQX OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI
Summary Description A Deserialization of Untrusted Data CWE-502 issue in OpenDJ's JMX RMI connector allows an unauthenticated remote attacker to deserialize arbitrary Java objects on the server. The vulnerability exists because the platform reads and processes attacker-controlled bytes prior to...
MINI-XR49-M85W-9JMX
Bulletin has no description...
io.micrometer:micrometer-atlas-starter (0.8.0.release), io.micrometer:micrometer-datadog-starter (0.8.0.release) +5 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (0.8.0.release)
io.micrometer:micrometer-core MAVEN version 0.8.0.release is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-core and may be impacted: - io.micrometer:micrometer-atlas-starter 0.8.0.release - io.micrometer:micrometer-datadog-start...
io.micrometer:micrometer-atlas-starter (0.9.0.release), io.micrometer:micrometer-datadog-starter (0.9.0.release) +6 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (0.9.0.release)
io.micrometer:micrometer-core MAVEN version 0.9.0.release is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-core and may be impacted: - io.micrometer:micrometer-atlas-starter 0.9.0.release - io.micrometer:micrometer-datadog-start...
io.micrometer:micrometer-registry-atlas (0.12.0.release), io.micrometer:micrometer-registry-datadog (0.12.0.release) +6 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (0.12.0.release)
io.micrometer:micrometer-core MAVEN version 0.12.0.release is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-core and may be impacted: - io.micrometer:micrometer-registry-atlas 0.12.0.release -...
