PT-2026-84120

Name of the Vulnerable Software and Affected Versions CRI-O affected versions not specified Description A trust-boundary flaw exists in the sandbox state persistence of CRI-O. This issue allows attacker-influenced pod metadata to overwrite reserved sandbox bookkeeping. After a restart, this data ...

CVE-2026-16440

A flaw was found in Eclipse OpenJ9. A remote attacker with low privileges could exploit this vulnerability by convincing a user to process a specially crafted .class file containing deeply nested annotations. This could lead to a segmentation fault, resulting in a Denial of Service DoS for the...

Security Bulletin: Security vulnerability affects IBM® SDK, Java™ Technology Edition (CVE-2026-16440)

Summary Security vulnerability has been addressed in IBM® SDK, Java™ Technology Edition. Vulnerability Details CVEID:CVE-2026-16440 DESCRIPTION: In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault. CWE:CWE-674: Uncontrolled...

IBM Java 7.1 < 7.1.5.31 / 8.0 < 8.0.8.70

The version of IBM Java installed on the remote host is 7.1 prior to 7.1.5.31 / 8.0 prior to 8.0.8.70. It is, therefore, affected by a vulnerability as referenced in the IBM Security Update August 2026 advisory. - In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested...

SUSE CVE-2026-16440

In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault...

CVE-2026-16440

In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault...

CVE-2026-16440

In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault...

CVE-2026-16440

In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault...

EUVD-2026-62368

In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault...

CVE-2026-16440

In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault...

CVE-2026-16440

In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault...

CVE-2026-16440

Eclipse OpenJ9 versions up to 0.60 are vulnerable to a segmentation fault triggered by a crafted .class file containing deeply nested annotations. The root cause is improper handling of annotation nesting depth during class file processing, leading to a crash and denial of service . The CVSS 4.0 ...

PT-2026-78323

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 versions prior to 0.61 Description A crafted .class file containing deeply nested annotations can trigger a segmentation fault, which is a specific type of crash that occurs when a program attempts to access a memory location th...

CVE-2026-16440: Uncontrolled Recursion

In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault...

CVE-2026-66792

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into a...

EUVD-2026-60322

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into a...

CVE-2026-66792

multicloud-operators-subscription (Red Hat Advanced Cluster Management) trusts user-settable annotations to determine cluster-admin status. A managed-cluster user can create a Subscription with crafted annotations to trigger isclusteradmin() as true, escalating to deploy resources anywhere using ...

CVE-2026-66792 Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into a...

CVE-2026-66792

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into a...

CVE-2026-66792 Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into a...