CVE-2026-54147: Use of a Broken or Risky Cryptographic Algorithm

http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvider.verify in http4k-security-digest ignores its configured algorithm parameter and verifies every Digest response with hardcoded MD5. Deployments configured for SHA-256 therefor...

IBM Cognos Analytics 12.0.4 < 12.0.4 FP3 / 12.1.x < 12.1.3 FP2 Multiple Vulnerabilities (7287209)

The version of IBM Cognos Analytics installed on the remote host is 12.0.4 prior to 12.0.4 FP3, or 12.1.x prior to 12.1.3 FP2. It is, therefore, affected by multiple vulnerabilities as referenced in the IBM Security Bulletin No. 7287209: - NLTK versions 3.9.2 and prior are vulnerable to arbitrary...

Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities (CVE-2026-69247, CVE-2026-69248, CVE-2026-69249)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM SOAR QRadar Plugin App has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION: cryptography is a package...

[SECURITY] Fedora 44 Update: python-jwcrypto-1.6.0-1.fc44

Implements JWK, JWS, JWE specifications using python-cryptography...

[SECURITY] Fedora 45 Update: python-jwcrypto-1.6.0-1.fc45

Implements JWK, JWS, JWE specifications using python-cryptography...

Ubuntu 18.04 LTS / 26.04 LTS : python-cryptography vulnerabilities (USN-8776-1)

The remote Ubuntu 18.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8776-1 advisory. It was discovered that python-cryptography incorrectly accepted objects with immutable buffers when performing certain cipher operations. Thi...

USN-8776-1 python-cryptography vulnerabilities

It was discovered that python-cryptography incorrectly accepted objects with immutable buffers when performing certain cipher operations. This would result in corrupted output, contrary to expectations. This issue only affected Ubuntu 18.04 LTS. CVE-2023-23931 It was discovered that...

USN-8776-1: python-cryptography vulnerabilities

It was discovered that python-cryptography incorrectly accepted objects with immutable buffers when performing certain cipher operations. This would result in corrupted output, contrary to expectations. This issue only affected Ubuntu 18.04 LTS. CVE-2023-23931 It was discovered that...

CLSA-2026-1789557846 TuxCare security update for cryptography (2 CVEs)

TuxCare rebuilt cryptography to address 2 CVEs. Fixed in 43.0.1.post3+tuxcare...

CLSA-2026-1789557122 TuxCare security update for cryptography (1 CVE)

TuxCare rebuilt cryptography to address 1 CVE. Fixed in 42.0.0.post3+tuxcare...

CLSA-2026-1789552762 TuxCare security update for cryptography (1 CVE)

TuxCare rebuilt cryptography to address 1 CVE. Fixed in 43.0.3.post4+tuxcare...

PT-2026-99405

TuxCare rebuilt cryptography to address 2 CVEs. Fixed in 43.0.1.post3+tuxcare...

PT-2026-99404

TuxCare rebuilt cryptography to address 1 CVE. Fixed in 42.0.0.post3+tuxcare...

PT-2026-99401

TuxCare rebuilt cryptography to address 1 CVE. Fixed in 43.0.3.post4+tuxcare...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in cryptography

Summary IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in cryptography Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0,...

Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i

Summary IBM Rational Developer for i is affected by a broken cryptographic algorithm vulnerability in Bcprov CVE-2025-14813, an LDAP injection vulnerability in Bcprov CVE-2026-0636, a memory allocation with excessive size value vulnerability in Bcprov CVE-2026-12185, an improper validation of...

CVE-2026-11929: Use of a Broken or Risky Cryptographic Algorithm

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data...

CVE-2026-17467

IBM Cloud Pak for Data System Yosemite 1.0 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols...

CVE-2026-17467 Vulnerabilities exists in IBM Cloud Pak for Data System

IBM Cloud Pak for Data System Yosemite 1.0 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols...

CVE-2026-17467

IBM Cloud Pak for Data System (Yosemite 1.0) version 3.0.5.2 is affected by a vulnerability (CWE-327) where weak or deprecated cryptographic protocols could allow a remote attacker to obtain sensitive information. The attack vector is network-based with low complexity, requiring no privileges or ...