CVE-2026-17943

An inappropriate implementation flaw was found in the Parser component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514424283...

CVE-2026-66369

The CVE-2026-66369 issue affects the GOOSE parser in the libiec61850 library used by MZ Automation. It is caused by an off-by-one boundary-handling flaw in the parser that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus, causing the parser to advance its in...

CVE-2026-66369 MZ Automation libiec61850 Out-of-bounds Read

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap...

CVE-2026-66369

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap...

CVE-2026-66364

CVE-2026-66364 affects the GOOSE payload parser (notably in the libiec61850/GOOSE implementation referenced by MZ Automation). The root cause is a boundary handling flaw: during processing of certain payload fields, an attacker-controlled inner element length may exceed its enclosing length, caus...

CVE-2026-66364

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over...

CVE-2026-66364 MZ Automation libiec61850 Out-of-bounds Read

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over...

com.norconex.collectors:norconex-collector-core (3.2.0), com.norconex.collectors:norconex-collector-filesystem (3.2.0) +3 more potentially affected by CVE-2026-66755 via org.apache.tika:tika-parser-scientific-module (>=3.0.0-beta, <=3.3.1)

org.apache.tika:tika-parser-scientific-module MAVEN version =3.0.0-beta, =3.0.0-beta, =3.3.1 Source cves: CVE-2026-66755 Source advisory: SNYK:JAVA-ORGAPACHETIKA-19351260...

org.apache.tika:tika-parser-scientific-package (4.0.0-alpha-1) potentially affected by CVE-2026-66755 via org.apache.tika:tika-parser-scientific-module (4.0.0-alpha-1)

org.apache.tika:tika-parser-scientific-module MAVEN version 4.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-parser-scientific-module and may be impacted: - org.apache.tika:tika-parser-scientific-package 4.0.0-alpha-1...

CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

UBUNTU-CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-66755 Apache Tika: Arbitrary Local File Read in ISArchiveParser

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-66755 Apache Tika: Arbitrary Local File Read in ISArchiveParser

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

org.apache.tika:tika-parser-scientific-package (4.0.0-alpha-1) potentially affected by CVE-2026-66755 via org.apache.tika:tika-parser-scientific-module (4.0.0-alpha-1)

org.apache.tika:tika-parser-scientific-module MAVEN version 4.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-parser-scientific-module and may be impacted: - org.apache.tika:tika-parser-scientific-package 4.0.0-alpha-1...

com.norconex.collectors:norconex-collector-core (3.2.0), com.norconex.collectors:norconex-collector-filesystem (3.2.0) +13 more potentially affected by CVE-2026-66755 via org.apache.tika:tika-parser-scientific-module (>=2.1.0, <=3.3.1)

org.apache.tika:tika-parser-scientific-module MAVEN version =2.1.0, =2.8, =2.8, =2.8, =2.8, =2.8, =2.8, =2.8, =2.8, =2.1.0, =3.3.1 Source cves: CVE-2026-66755 Source advisory: MEND:CVE-2026-66755...

CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-66755 Apache Tika: Arbitrary Local File Read in ISArchiveParser

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

Security Bulletin: Multiple Security vulnerabilities impacting watsonx.data integration

Summary Multiple Security vulnerabilities impacting watsonx.data integration. These vulnerabilities have been addressed and customers should update to version 5.3.1 at the earliest opportunity. Vulnerability Details CVEID:CVE-2026-33151 DESCRIPTION: Socket.IO is an open source, real-time,...