CVE-2026-14909

IBM WebSphere Application Server Liberty (versions 17.0.0.3 through 26.0.0.9) is vulnerable to an information disclosure vulnerability (CWE-209). When the restConnector-2.0 feature is enabled, an authenticated attacker can obtain sensitive information through the generation of error messages cont...

CVE-2026-77816

The IBM WebSphere Application Server - Liberty administrative client (versions 17.0.0.3 through 26.0.0.9 ) is vulnerable to a man-in-the-middle attack due to Improper Certificate Validation (CWE-295). An attacker could exploit this flaw to obtain sensitive information. This vulnerability also aff...

CVE-2026-77816 IBM WebSphere Application Server Liberty Improper Certificate Validation

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to obtain sensitive information...

CVE-2026-79715

IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 are vulnerable to a path traversal vulnerability (CWE-22 ). A local attacker can use a specially crafted application archive to traverse directories and write files outside the intended directory. This issue also affect...

CVE-2026-79715 IBM WebSphere Application Server Liberty Path Traversal

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

CVE-2026-70162

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...

CVE-2026-72955

A Use after free vulnerability in the Windows Application Compatibility Cache allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 . While the root cause is identified as a use after free error, sp...

CVE-2026-77459

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...

CVE-2026-66057

Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authentication navigation, allowing a crafted state value to redirect a user to an attacker-chosen location. This issue is fix...

CVE-2026-106035

An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log...