Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) CallHome component is affected by multiple vulnerabilities

Summary The CallHome component in IBM Cloud Pak for Data System 1.0 includes several open-source and third-party frameworks and packages as part of its management and diagnostic infrastructure. Multiple security vulnerabilities have been identified in underlying components, including Django, Go...

CVE-2026-109301: Uncaught Exception

Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 does not resolve file references lacking a URL before passing objects to Cloud Code triggers and LiveQuery, causing an uncaught exception that terminates the process. Attackers able to write to a class with Cloud Code save, find, or delet...

CVE-2026-109424: Use of Hard-coded Cryptographic Key

NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 and 3.1.39.205426 contains a weak encryption vulnerability where /eapi/ and /xeapi/ API response bodies are decrypted using a fixed, publicly documented AES-128-ECB key with no integrity credential. Attackers who can intercept ...

CVE-2026-109423: Improper Certificate Validation

NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic by failing to validate the server certificate chain, verify the hostname, or...

CVE-2026-109422: Exposed Dangerous Method or Function

NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied URLs to ShellExecuteW without validating the URL scheme. An attacker able to...

PT-2026-111100

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A remote authenticated attacker can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fails to...

CVE-2026-109168: Authorization Bypass Through User-Controlled Key

lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to list other business objects' file attachments by supplying an arbitrary bizId to the listFileByBizId endpoint. Attackers can retrieve file names, storage paths, MD5 hashes and...

PT-2026-110901

Name of the Vulnerable Software and Affected Versions NetEase Cloud Music client for Windows cloudmusic.exe version 3.1.38 NetEase Cloud Music client for Windows cloudmusic.exe version 3.1.39.205426 Description The application fails to validate the server certificate chain, verify the hostname, o...

CVE-2026-84418: Improper Certificate Validation

IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API...

CVE-2026-109378: Server-Side Request Forgery (SSRF)

SPIP before 4.4.18 contains a server-side request forgery vulnerability in recupererurl in ecrire/inc/distant.php that follows up to 10 redirects without re-validating targets with validerurldistante. Authenticated attackers can supply a remote URL, such as a syndicated site feed or remote...

PT-2026-110557

Name of the Vulnerable Software and Affected Versions lamp-cloud versions prior to 5.10.2 Description An insecure direct object reference occurs when an application provides direct access to objects based on user-supplied input. Authenticated users can obtain storage URLs for files belonging to...

PT-2026-110902

Name of the Vulnerable Software and Affected Versions NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 through 3.1.39.205426 Description The application uses a fixed, publicly documented AES-128-ECB key to decrypt response bodies from the '/eapi/' and '/xeapi/' API endpoints...

CVE-2026-109166: Authorization Bypass Through User-Controlled Key

lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to obtain storage URLs for other users' files by supplying arbitrary file ids. Attackers can send another user's file ids to the findUrlById handler of FileAnyoneController, which...

PT-2026-111101

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A path traversal issue allows a remote authenticated attacker to cause a denial of service. Path traversal is a flaw that allows an attacker to access files and directories that a...

CVE-2026-85951: Server-Side Request Forgery (SSRF)

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud credentials or...

CVE-2026-82101: Improper Limitation of a Pathname to a Restricted Directory

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

PT-2026-110645

🚨 CVE-2026-85952 Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized acces...

PT-2026-110644

🚨 CVE-2026-85951 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud...

PT-2026-110554

Name of the Vulnerable Software and Affected Versions Yungengxin Cloud Billing version 2024.11.28.11 Description A flaw exists in the IOCTL Process Termination component within the LWBilling64.sys library. Specifically, the sub 14000443C function is susceptible to manipulation of the Pid argument...

CVE-2026-108889: Exposed IOCTL with Insufficient Access Control

A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub14000443C in the library LWBilling64.sys of the component IOCTL Process Termination. Executing a manipulation of the argument Pid can lead to exposed ioctl with insufficient access...