Security Bulletin: IBM Guardium Data Protection is affected by security vulnerabilities (CVE-2026-19032, CVE-2026-83557)

Summary IBM Guardium Data Protection has addressed security vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-19032 DESCRIPTION: jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In...

CVE-2026-12669 IBM MQ Out-of-bounds Read

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

CVE-2026-12669 IBM MQ Out-of-bounds Read

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

EUVD-2026-104464

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

CVE-2026-12669

IBM MQ and IBM MQ Operator are affected by an out-of-bounds read vulnerability. An authenticated attacker can trigger this minor error by sending malformed compressed data . While the request is ultimately rejected, the underlying cause is a buffer error during data processing. The affected IBM M...

CLSA-2026-1792427749 TuxCare security update for org.springframework.data:spring-data-keyvalue (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-keyvalue to address 1 CVE. Fixed in 3.3.12-tuxcare.3...

OPENSUSE-SU-2026:22135-1 Security update for coredns

This update for coredns fixes the following issues: Changes in coredns: - Bump vendored google.golang.org/grpc from 1.83.0 to 1.83.1: CVE-2026-84304: heap memory exhaustion via HTTP/2 DATA frame fragmentation in the gRPC transport boo1279216 Done through the gomodules "require" parameter in servi...

CLSA-2026-1792426869 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.3.12-tuxcare.3...

CVE-2026-12254

Netskope is notified about a potential gap in its agent NSClient where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via t...

CVE-2026-112308

crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validateurl private-address check. Attackers influencing agent tool input through prompt injection can direct...

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities due to the use of IBM® SDK, Java™ Technology Edition

Summary IBM Virtualization Engine TS7700 is susceptible to information disclosure and data tampering CVE-2026-60147 and denial of service CVE-2026-16243 vulnerabilities due to the use of IBM SDK, Java Technology Edition, Version 8. TS7700 uses Java to provide the Management Interface. Vulnerabili...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow low-privilege attackers to access critical data or all data via the HTTP network, as well as cause certa...

Oracle JD Edwards EnterpriseOne Tools Authorization Vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have authorization-related vulnerabilities. These vulnerabilities stem from issues with the Installation Security component. They may allow unauthorized attackers to access via an HTTPS network, unauthorized creation, deletion, or...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Server component, which may allow attackers with low privileges and access through the network to unauthorizedly read certain...

Oracle WebCenter Content: Vulnerabilities in Permissions, Licensing, and Access Control

Oracle WebCenter Content 14.1.2.0.0 version has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Content Server component. They may allow unauthorized attackers to access critical data or all data through the HTTP network, as well...

Oracle Customer Care security vulnerabilities

Oracle Customer Care versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow unauthorized attackers to access through the HTTP network, potentially leading to unauthorized updates, insertions, or...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Essbase Web Platform component. They may allow low-privilege attackers to access critical data via the HTTP network, to access all accessible data without authorization, as well as to...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the EDI component. An attacker with low privileges and who can access via HTTP may be able to compromise the Oracle EDI Gateway and affect other products. This could result in...

Oracle Demand Planning security vulnerability

Versions 12.1 and 12.2 of Oracle Demand Planning contain a security vulnerability stemming from an issue in the Internal Operations component. This vulnerability may allow unauthenticated attackers to gain HTTP access via network interactions requiring user interaction. It affects other products,...

Oracle Communications Billing and Revenue Management security vulnerability

Versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 of Oracle Communications Billing and Revenue Management contain a security vulnerability stemming from issues within the BRM Server component. Unauthenticated attackers can access these systems via the TLS network, potentially leading to...