EUVD-2026-55867

SAP NetWeaver Application Server Java Adobe Document Service uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected...

PT-2026-70027

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java Adobe Document Service affected versions not specified Description The Adobe Document Service component uses outdated open source cryptographic and data transfer libraries. A low-privileged authenticated...

PT-2026-70369

Name of the Vulnerable Software and Affected Versions AMD Vitis Libraries affected versions not specified Description A timing discrepancy exists in the ECDSA secp256k1 component. This issue allows attackers with local access to conduct timing analysis or electromagnetic emanation attacks, which...

Vitis™ Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-43606| Observable Timing Discrepancy in the Vitis™ Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagneti...

Astra Linux – Vulnerability in Firefox

DoS attack in the Libraries component in NSS. This vulnerability has been fixed in Firefox 149 and Thunderbird 149...

Astra Linux – Vulnerabilities in Firefox, NSS, Thunderbird

Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35...

[SECURITY] Fedora 43 Update: python3.12-3.12.13-6.fc43

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses micrometer-core-1.15.11.jar, spring-core-6.2.18.jar, spring-security-web-6.5.10.jar, spring-data-commons-3.5.11.jar, spring-webmvc-6.2.18.jar, spring-expression-6.2.18.jar and spring-security-config-6.5.10.jar which are vulnerable to CVE-2026-40983, CVE-2026-40984,...

CVE-2026-15656 IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret

IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the...

CVE-2026-69244 vulnerabilities

Vulnerabilities for packages: text-generation-inference, kserve-models-web-app, apache-beam-python-3.12-sdk, py3-vllm-cuda-12.4, tritonserver-backend-vllm-cuda-13.0, vllm-cuda-13.2, py3.13-scanner-test-libraries-aiohttp, dask-kubernetes-fips, py3-cassandra-medusa, apache-beam-python-3.11-sdk,...

CVE-2026-69243 vulnerabilities

Vulnerabilities for packages: text-generation-inference, kserve-models-web-app, apache-beam-python-3.12-sdk, py3-vllm-cuda-12.4, tritonserver-backend-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp, dask-kubernetes-fips, py3-cassandra-medusa, apache-beam-python-3.11-sdk, lmcache-cuda-12.8,...

GHSA-MFX4-HV73-Q22V vulnerabilities

Vulnerabilities for packages: text-generation-inference, kserve-models-web-app, apache-beam-python-3.12-sdk, py3-vllm-cuda-12.4, tritonserver-backend-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp, dask-kubernetes-fips, py3-cassandra-medusa, apache-beam-python-3.11-sdk, lmcache-cuda-12.8,...

GHSA-CQ5V-8Q36-5273 vulnerabilities

Vulnerabilities for packages: text-generation-inference, kserve-models-web-app, apache-beam-python-3.12-sdk, py3-vllm-cuda-12.4, tritonserver-backend-vllm-cuda-13.0, vllm-cuda-13.2, py3.13-scanner-test-libraries-aiohttp, dask-kubernetes-fips, py3-cassandra-medusa, apache-beam-python-3.11-sdk,...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses spring-security-core-6.5.10.jar, form-data-4.0.5.tgz, ws-8.20.1.tgz, pythonmultipart-0.0.27-py3-none-any.whl, starlette-1.2.1-py3-none-any.whl, httpcore5-5.3.6.jar, httpcore5-h2-5.3.6.jar, mlflow-3.13.0-py3-none-any.whl, js-yaml-4.2.0.tgz and tar-7.5.16.tgz which ar...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

CVE-2026-11980

IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up...

EUVD-2026-51142

IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up...

Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities

Summary Multiple vulnerabilities are found in the dependent open source libraries used in IBM Quantum Safe Explorer code base. IBM Quantum Safe Explorer has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-14631 DESCRIPTION:...

pipewire security update

An update is available for pipewire. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PipeWire is a multimedia server for Linux and other Unix like operating...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.

Summary Multiple vulnerabilities have been found in CICS Transaction Gateway for Multiplatforms due to the use of IBM WebSphere Application Server Liberty, IBM WebSphere Application Server and Jackson Databind. The versions of IBM WebSphere Application Server Liberty, IBM WebSphere Application...