CVE-2026-82418

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability...

CVE-2026-19319

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-17493

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

CVE-2026-16725

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal...

EUVD-2026-117118

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal...

CVE-2026-16725

The IBM Watson Speech Services Cartridge (versions 4.0.0 through 5.4.0 ) is vulnerable to a Path Traversal flaw (CWE-22) within the LangSmith SDK's TracingMiddleware . A remote authenticated attacker can exploit this to read arbitrary files from the local filesystem and upload their contents to L...

CVE-2026-16725 IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal...

CVE-2026-19319

The IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 are vulnerable to an out-of-bounds read in the Onnx component. The root cause is a flaw in the adapt_gemm_7_6 function when processing specific input, which could allow a remote attacker to obtain sensitive information. This vu...

EUVD-2026-117117

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-82418

IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 are vulnerable to a use-after-free vulnerability (CWE-416 ). The root cause lies in OpenSSL versions included in cryptography wheels prior to cryptograph 48.01 , which can be triggered by specially crafted PKCS#7 or S/MIME signed m...

EUVD-2026-117116

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability...

CVE-2026-17493

The IBM Watson Speech Services Cartridge (versions 4.0.0 through 5.4.0 ) is vulnerable to a denial of service (DoS) attack. The root cause is an out-of-bounds read within the Unpacker component, which is used as part of the Speech runtimes. A remote attacker can trigger this by providing untruste...

EUVD-2026-117115

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

PT-2026-137180

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

PT-2026-137179

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal...

PT-2026-137181

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

PT-2026-137182

Name of the Vulnerable Software and Affected Versions IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 Description A use-after-free flaw in the bundled OpenSSL library allows a remote, unauthenticated attacker to execute arbitrary code over the network. Use-after-free is a memory...

Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate with watsonx Assistant Cartridge version for the component wxo-server-server Vulnerability Details CVEID:CVE-2026-59822 DESCRIPTION: LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior t...

Security Bulletin: Vulnerability in braces affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in braces has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerabilit...

Security Bulletin: Vulnerability in FasterXML jackson-core affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in FasterXML jackson-core has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional...