PT-2026-95605

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

PT-2026-95610

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...

PT-2026-95609

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...

CVE-2026-11539: Missing Authentication for Critical Function

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...

CVE-2026-11549: Improper Access Control

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by a virtual host bypass vulnerability...

PT-2026-95607

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...

CVE-2026-11722: Inconsistent Interpretation of HTTP Requests

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability...

PT-2026-95612

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server affected versions not specified IBM WebSphere Application Server Liberty affected versions not specified Description IBM WebSphere Application Server and WebSphere Application Server Liberty are subject to HTTP...

EulerOS Virtualization 2.11.0 : openjpeg2 (EulerOS-SA-2026-3533)

According to the versions of the openjpeg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified...

Esri Portal for ArcGIS 11.1 / 11.3 / 11.5 / 12.0 < Security 2026 Update 3 Multiple Vulnerabilities

The version of Esri Portal for ArcGIS installed on the remote host is 11.1, 11.3, 11.5, or 12.0 and is missing the Security 2026 Update 3 Patch. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability exists in Esri Portal for ArcGIS that may under...

CVE-2026-11548: Inconsistent Interpretation of HTTP Requests

IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability...

PT-2026-95417

Name of the Vulnerable Software and Affected Versions JBoss Enterprise Application Platform affected versions not specified Description A flaw exists in the Elytron component of EAP. When an application security domain is backed by an Elytron token-realm using oauth2-introspection, the system...

CVE-2026-11538: Improper Output Neutralization for Logs

IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies...

PT-2026-95600

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server 9.0 IBM WebSphere Application Server 8.5 Description Log injection is possible through the use of crafted LTPA Lightweight Third-Party Authentication token cookies. This allows an attacker to insert malicious...

PT-2026-95472

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 9.0.5.29 IBM WebSphere Application Server versions prior to 8.5.5.31 Description A remote attacker can obtain sensitive information regarding the file system by exploiting the 'FileTransfer'...

EulerOS Virtualization 2.11.1 : openjpeg2 (EulerOS-SA-2026-3446)

According to the versions of the openjpeg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified...

CVE-2026-92758 Logs may collect sensitive information

If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information if in use such as passwords and AWS secure access keys...

CVE-2026-92758

This MongoDB -related vulnerability occurs when the application logging mode is set to DEBUG or a malformed MongoDB connection string is used, causing application logs to capture sensitive information such as passwords and AWS secure access keys. The root cause is overly verbose or misconfigured ...

EUVD-2026-82380

If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information if in use such as passwords and AWS secure access keys...

GHSA-XWWF-M8FG-P9Q2 RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation

Summary A Denial of Service DoS vulnerability exists in the AMQP client's connection negotiation logic. The AMQP specification explicitly mandates a strict minimum frame size of 4096 bytes to prevent pathological packet fragmentation. While the library defines a frameMinSize = 4096 constant, the...