CVE-2026-11716

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster migration data...

CVE-2026-11716 IBM MQ for HPE NonStop is vulnerable to a denial of service attack

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster migration data...

CVE-2026-11716

IBM MQ (across multiple platforms including HPE NonStop, standard server, and Appliance) is affected by a heap-based buffer overflow (CWE-122) in the queue manager's cluster migration message handler. An authenticated attacker with network access can trigger a denial of service or potentially exe...

CVE-2026-11716 IBM MQ for HPE NonStop is vulnerable to a denial of service attack

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster migration data...

EUVD-2026-83289

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster migration data...

CVE-2026-10853

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths...

CVE-2026-10853

IBM MQ is affected by a heap buffer overflow in the queue manager's cluster repository manager , caused by improper validation of cluster command message lengths. An authenticated attacker with cluster access can trigger a denial of service or potentially achieve arbitrary code execution (CVSS 7....

CVE-2026-10853 IBM MQ queue manager is vulnerable to remote code execution

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths...

CVE-2026-10853 IBM MQ queue manager is vulnerable to remote code execution

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths...

EUVD-2026-83032

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths...

CLEANSTART-2026-LX31883 Security fix for ghsa-gx3x-vq4p-mhhv applied in: cert-manager-cmctl 2.3.0-r1, cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.19.0-r1, percona-xtradb-cluster-operator-fips 1.19.0-r1

ghsa-gx3x-vq4p-mhhv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OJ21892 Security fix for CVE-2026-25518 applied in: cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.18.0-r1, percona-xtradb-cluster-operator-fips 1.18.0-r1, step-issuer 0.9.11-r1

CVE-2026-25518 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AY16638 Security fix for CVE-2020-8565 applied in: cluster-proportional-autoscaler 1.7.1-r0, gostatsd 28.3.0-r2

CVE-2020-8565 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZL73481 Security fix for CVE-2021-4235 applied in: cluster-proportional-autoscaler 1.7.1-r0

Security vulnerability affects the cluster-proportional-autoscaler package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LR86160 Security fix for CVE-2019-11250 applied in: cluster-proportional-autoscaler 1.7.1-r0, flux-notification-controller-fips 1.9.2-r0

CVE-2019-11250 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GX38111 Security fix for CVE-2019-11254 applied in: cluster-proportional-autoscaler 1.7.1-r0

Security vulnerability affects the cluster-proportional-autoscaler package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RN37949 Security fix for CVE-2020-8559 applied in: cluster-proportional-autoscaler 1.7.1-r0

Security vulnerability affects the cluster-proportional-autoscaler package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YU71715 Security fix for CVE-2022-3064 applied in: cluster-proportional-autoscaler 1.7.1-r0

Security vulnerability affects the cluster-proportional-autoscaler package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DT87304 Security fix for CVE-2021-3121 applied in: cluster-proportional-autoscaler 1.7.1-r0

Security vulnerability affects the cluster-proportional-autoscaler package. This issue is resolved in later releases. See references for vulnerability details...

tomcat: Apache Tomcat: Replay attack via improper authentication in EncryptionInterceptor

A flaw was found in Apache Tomcat. An improper authentication vulnerability in the EncryptionInterceptor component allows a remote attacker to perform a replay attack. This could lead to unauthorized access or manipulation of data within the cluster component...