EUVD-2026-40325

KTM System e-BOK does not implement any limit or timeout on consecutive login attempts, allowing an attacker to perform unlimited authentication requests. This lack of rate‑limiting enables efficient brute‑force attacks against user accounts. When combined with vulnerability CVE-2026-35097, where...

CVE-2026-35097 Weak Password Requirements in KTM System e-BOK

KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any alphabetic, special, or extended characters. This issue was fixed in the patch published in June 2026...

CVE-2026-35097 Weak Password Requirements in KTM System e-BOK

KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any alphabetic, special, or extended characters. This issue was fixed in the patch published in June 2026...

CVE-2026-35097

KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any alphabetic, special, or extended characters. This issue was fixed in the patch published in June 2026...

CVE-2026-35097

The CVE affects KTM System e-BOK, where the password policy allows only numeric passwords up to six digits. Root cause is a restricted character set and short max length, resulting in weak credential requirements. The issue has been addressed by a patch published in June 2026. Remediation recomme...

CVE-2026-35098

KTM System e-BOK is affected by CVE-2026-35098 due to no rate limiting on login attempts, enabling brute-force attacks for user accounts. When paired with CVE-2026-35097 (six-digit numeric passwords), the risk increases. A patch was released in June 2026 to fix this issue. The CVSS metrics from C...

EUVD-2026-40323

KTM System e-BOK is vulnerable to Cross‑Site Request Forgery CSRF in both the email-change and password-change functionalities. An attacker can craft a malicious website that, when visited by an authenticated user, automatically sends a forged POST request to the application. This allows the...

CVE-2026-35096

KTM System e-BOK is vulnerable to Cross‑Site Request Forgery CSRF in both the email-change and password-change functionalities. An attacker can craft a malicious website that, when visited by an authenticated user, automatically sends a forged POST request to the application. This allows the...

CVE-2026-35096 Cross-Site Request Forgery (CSRF) in KTM System e-BOK

KTM System e-BOK is vulnerable to Cross‑Site Request Forgery CSRF in both the email-change and password-change functionalities. An attacker can craft a malicious website that, when visited by an authenticated user, automatically sends a forged POST request to the application. This allows the...

CVE-2026-35096

KTM System e-BOK is affected by a Cross-Site Request Forgery (CSRF) in the email-change and password-change functions. The issue allows an attacker to lure an authenticated user to a malicious site that issues forged requests to perform an email or password change without user interaction. Root c...

EUVD-2026-40322

KTM System e-BOK allows the session identifier to be set by the client prior to authentication. If a cookie with a valid name is set, its value remains unchanged after successful login. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session...

CVE-2026-35095

KTM System e-BOK allows the session identifier to be set by the client prior to authentication. If a cookie with a valid name is set, its value remains unchanged after successful login. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session...

CVE-2026-35095

Technical details (affected products/components, root cause, impact, or remediation) are not publicly available in the provided documents. Monitor for updates.

PT-2026-53888

KTM System e-BOK does not implement any limit or timeout on consecutive login attempts, allowing an attacker to perform unlimited authentication requests. This lack of rate‑limiting enables efficient brute‑force attacks against user accounts. When combined with vulnerability CVE-2026-35097, where...

CVE-2026-41896

creationtimestamp| type| source ---|---|--- 2026-06-29 23:13:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphmhrstrp2h 2026-06-29 23:18:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphmq3627t2n...

CVE-2026-13580

creationtimestamp| type| source ---|---|--- 2026-06-29 16:49:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwyvgzlc25 2026-06-29 17:29:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgzarylj723 2026-06-29 22:08:27+00:00| seen|...

CVE-2026-57333

creationtimestamp| type| source ---|---|--- 2026-06-29 16:28:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgvtgfetf2o 2026-06-29 16:59:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxl4dxci2b 2026-06-29 20:40:15+00:00| seen|...

CVE-2026-40524

creationtimestamp| type| source ---|---|--- 2026-06-29 15:16:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgrs3atsj2j 2026-06-29 15:55:51+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgtz42vwk25 2026-06-29 15:55:52+00:00| seen|...

CVE-2026-49355

creationtimestamp| type| source ---|---|--- 2026-06-29 14:42:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpvnlgcv2d 2026-06-29 14:42:27+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgpvt4gmd2m...

Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes June 2026

Summary In addition to updating many operating system level packages, the following security vulnerabilities are addressed with IBM Business Automation Workflow cumulative fixes. Vulnerability Details CVEID:CVE-2026-29063 DESCRIPTION: Immutable.js provides many Persistent Immutable data structure...