Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2026.

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue...

GHSA-7H8W-HJ9J-8RJW

creationtimestamp| type| source ---|---|--- 2026-03-27 03:17:50+00:00| published-proof-of-concept| Telegram/GblWBcVIPYIrXGBoPy7bAM0O64UdRepvGT6caCd3l3fA...

CVE-2026-33701

creationtimestamp| type| source ---|---|--- 2026-03-27 02:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhz4bjog5422 2026-03-27 03:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116298903055981699 2026-03-27 03:00:32+00:00| seen|...

Microsoft Edge (Chromium) < 146.0.3856.72 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 146.0.3856.72. It is, therefore, affected by multiple vulnerabilities as referenced in the March 20, 2026 advisory. - Out of bounds read and write in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote...

GHSA-Q938-GHWV-8GVC

creationtimestamp| type| source ---|---|--- 2026-03-26 23:20:03+00:00| seen| Telegram/8zEAgaRSdVOPVh8YiiaVjapuYDuCzradOizJ-8M58UocKc...

CVE-2026-33686

creationtimestamp| type| source ---|---|--- 2026-03-26 22:18:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyn3ypzwa2x 2026-03-26 22:18:36+00:00| seen| https://bsky.app/profile/potato.software/post/3mhyn3zn4td2z 2026-03-26 22:56:19+00:00| seen|...

GHSA-7M7C-JJQC-R522

creationtimestamp| type| source ---|---|--- 2026-03-26 21:36:40+00:00| seen| Telegram/gdbQBvnuOgX0zlyJL9kfjxoCoTp9WBTGn5-zeTA4spKkwcA...

CVE-2026-27081

creationtimestamp| type| source ---|---|--- 2026-03-26 21:35:15+00:00| seen| Telegram/zW9IZrd6TGtn6tlC-J0V1NpAAnhFTvKo2N1YPzc1YC33cco...

CVE-2026-27039

creationtimestamp| type| source ---|---|--- 2026-03-26 21:35:04+00:00| seen| Telegram/uX4TKA0ifXT0knFE-3lZyz36JeQNL4GgXr6yUfz4-1wQtc...

CVE-2026-33494

creationtimestamp| type| source ---|---|--- 2026-03-26 18:01:14+00:00| seen| https://infosec.exchange/users/offseq/statuses/116296782554333231 2026-03-26 18:01:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhy6pudmxi2j 2026-03-26 19:04:07+00:00| seen|...

CVE-2026-20989

Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1 allows physical attackers to use custom font...

Security Bulletin: IBM Operational Decision Manager for March 2026 - Multiple CVEs addressed

Summary IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-41254...

CVE-2026-4758

creationtimestamp| type| source ---|---|--- 2026-03-26 01:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwfp2iqwd2s 2026-03-26 01:15:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwgjfmkf22n...

CVE-2026-33917

creationtimestamp| type| source ---|---|--- 2026-03-26 01:00:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwfokbfmu2d 2026-03-26 01:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwfpllrut2r 2026-03-28 12:00:16+00:00| seen|...

Fedora 44 : dotnet10.0 (2026-956fc306c4)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-956fc306c4 advisory. This is the March 2026 release of .NET 10. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.104.md - Runtime:...

Fedora 44 : dotnet9.0 (2026-624e30e8a7)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-624e30e8a7 advisory. This is the March 2026 release of .NET 9. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.115.md - Runtime:...

Fedora 44 : dotnet8.0 (2026-702a03ac4d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-702a03ac4d advisory. This is the March 2026 release of .NET 8 Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.125.md - Runtime:...

Cisco IOS XE Software Lobby Ambassador Privilege Escalation Vulnerability

A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would not normally be available for Lobby Ambassador users. This vulnerability exists because...

CVE-2026-4712

creationtimestamp| type| source ---|---|--- 2026-03-25 00:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtrvis33k27 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 04:01:24+00:00|...

CVE-2026-24157

creationtimestamp| type| source ---|---|--- 2026-03-24 22:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlaafs4h2t 2026-03-24 22:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlchdzrc2n 2026-03-31 03:20:09+00:00| seen|...