PT-2026-28131

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - Monitor Component versions 9.1, 9.0, 8.11, and 8.10 Description The software allows an unauthorized user to inject data into log messages because of insufficient sanitization of special characters when writing to...

IBM Maximo Application Suite – Monitor Component security vulnerability

IBM Maximo Application Suite - Monitor Component is an industrial asset management component provided by IBM that offers capabilities for monitoring the status of assets and analyzing data. Versions 9.1, 9.0, 8.11, and 8.10 of IBM Maximo Application Suite - Monitor Component contain security...

CVE-2025-14684: Improper Output Neutralization for Logs

IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...

SUSE-SU-2026:20866-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcpschedulework bsc1255053. - CVE-2025-40284: Bluetooth: MGMT: cancel mesh send timer when hdev removed bsc1257669. ...

RLSA-2026:5578 Moderate: virt:rhel and virt-devel:rhel security update

Kernel-based Virtual Machine KVM offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the...

io.choerodon:choerodon-starter-config-monitor (>=0.5.0.release, <=0.6.4.release), org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.2.0, <=5.2.9) +2 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.3.3.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - io.choerodon:choerodon-starter-config-monitor...

org.springframework.cloud:spring-cloud-config-monitor (1.3.4.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.3.4.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

org.springframework.cloud:spring-cloud-config-monitor (1.4.1.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.4.1.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.4.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

org.springframework.cloud:spring-cloud-config-monitor (1.4.2.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.4.2.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.4.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

cn.home1:spring-cloud-config-monitor (>=0.0.1, <=1.0.1.u1), cn.home1:spring-cloud-config-server (>=0.0.1, <=1.0.1.u1) +27 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.4.3.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.4.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - cn.home1:spring-cloud-config-monitor =0.0.1,...

com.tairanchina.csp.dew:config (>=1.5.0-beta, <=1.5.1-rc), org.springframework.cloud:spring-cloud-config-monitor (1.4.4.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.4.4.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.4.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - com.tairanchina.csp.dew:config =1.5.0-beta,...

org.springframework.cloud:spring-cloud-config-monitor (1.4.5.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.4.5.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.4.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

org.springframework.cloud:spring-cloud-config-monitor (1.4.6.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.4.6.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

org.springframework.cloud:spring-cloud-config-monitor (1.4.7.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.4.7.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.4.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

com.okta.spring.examples:okta-spring-boot-cloud-config-example (>=1.0.0, <=1.1.0), com.yoozoo.protoconf:protoconf-java (>=0.2.2, <=0.2.3) +4 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.0.2.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

org.springframework.cloud:spring-cloud-alibaba-nacos-config-server (0.2.2.release), org.springframework.cloud:spring-cloud-config-monitor (2.0.3.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.0.3.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

io.mosip.kernel:kernel-config-server (>=1.1.2-rc2, <=1.1.2), org.springframework.cloud:spring-cloud-config-monitor (2.0.4.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.0.4.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - io.mosip.kernel:kernel-config-server =1.1.2-rc2...

com.alibaba.cloud:spring-cloud-alibaba-nacos-config-server (>=2.0.0.release, <=2.0.1.release), com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config-server (>=2.0.2.release, <=2.0.4.release) +1 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.0.5.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=6.0.1, <=6.1.0-rc2), org.apereo.cas:cas-server-webapp-config-server (>=6.0.1, <=6.1.0-rc1) +10 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.1.0.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

ai.hyacinth.framework:core-service-config-server (0.5.0), org.springframework.cloud.stream.app:spring-cloud-stream-app-starters-docs (>=einstein.sr1, <=einstein.sr3) +2 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.1.1.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - ai.hyacinth.framework:core-service-config-serve...