Security Bulletin: Multiple Vulnerabilities in IBM Event Processing

Summary Multiple vulnerabilities were addressed. Vulnerability Details CVEID:CVE-2025-69873 DESCRIPTION: ajv Another JSON Schema Validator before 8.18.0 is vulnerable to Regular Expression Denial of Service ReDoS when the $data option is enabled. The pattern keyword accepts runtime data via JSON...

CVE-2026-63144

creationtimestamp| type| source ---|---|--- 2026-07-22 02:55:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7d42ptqm2g...

CVE-2026-8985

creationtimestamp| type| source ---|---|--- 2026-07-22 02:01:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7a3gina72s 2026-07-22 17:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mratv7bbrw2e...

CVE-2026-62546

creationtimestamp| type| source ---|---|--- 2026-07-22 01:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr773trwh72i 2026-07-22 16:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrarcxmbpu23 2026-07-23 18:20:51+00:00| seen|...

PT-2026-63545

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.136.Final Netty versions prior to 4.2.16.Final Description The OcspServerCertificateValidator forwards the SslHandshakeCompletionEvent before the asynchronous Online Certificate Status Protocol OCSP validation...

CVE-2026-60280

creationtimestamp| type| source ---|---|--- 2026-07-21 23:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6y7itcfn2a 2026-07-23 16:50:36+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 17:37:06+00:00| seen|...

CVE-2026-60522

creationtimestamp| type| source ---|---|--- 2026-07-21 23:13:15+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr6wphsmwz2l 2026-07-23 17:18:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-47016

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: Event Publish and Subscribe. Supported versions that are affected are 17.0-26.4. Difficult to exploit vulnerability allows physical access to compromise Siebel CRM Integration. While the vulnerability is in Siebel...

CVE-2026-60215

creationtimestamp| type| source ---|---|--- 2026-07-21 22:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6tjaqh3u23 2026-07-23 16:48:19+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 07:37:06+00:00| seen|...

CVE-2026-46989

creationtimestamp| type| source ---|---|--- 2026-07-21 22:06:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6sxgxqu62j 2026-07-23 16:45:33+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 15:07:07+00:00| seen|...

CVE-2026-46982

creationtimestamp| type| source ---|---|--- 2026-07-21 22:04:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6sttqniu23 2026-07-23 16:45:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-63923

A flaw was found in the Linux kernel's octeontx2-af driver. A malicious Virtual Function VF attached to a Physical Function PF in switchdev representor mode can send a specially crafted REPEVENTNOTIFY message. This message contains an unvalidated pcifunc field, which can lead to an out-of-bounds...

CVE-2026-63080

Aptabase through commit 5a89368 contains a SQL injection vulnerability in the ClickHouse query backend that allows authenticated attackers to read event data across all tenants by injecting unsanitized filter parameters into Liquid SQL templates. Attackers can supply malicious values through...

CVE-2026-63080 Aptabase SQL Injection via ClickHouse query backend

Aptabase through commit 5a89368 contains a SQL injection vulnerability in the ClickHouse query backend that allows authenticated attackers to read event data across all tenants by injecting unsanitized filter parameters into Liquid SQL templates. Attackers can supply malicious values through...

CVE-2026-56145

CVE-2026-56145 describes an Elasticsearch vulnerability of uncontrolled resource consumption (CWE-400) leading to denial of service via excessive memory allocation (CAPEC-130). A low-privileged authenticated user who can execute EQL sequence queries against an index they control can craft queries...

CVE-2026-53027

creationtimestamp| type| source ---|---|--- 2026-07-21 19:40:08+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr6ksc4abk2n 2026-07-21 19:40:09+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr6ksct2qk2n 2026-07-24 13:25:25+00:00| seen|...

CVE-2026-16361

creationtimestamp| type| source ---|---|--- 2026-07-21 19:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6k4uz5j62u 2026-07-22 04:46:03+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 23:36:04+00:00| see...

CVE-2026-28309

creationtimestamp| type| source ---|---|--- 2026-07-21 16:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6afo2iiy2z 2026-08-11 16:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mssyost5x22h...

CVE-2026-16407

creationtimestamp| type| source ---|---|--- 2026-07-21 13:59:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xrbvh322s 2026-07-22 04:47:50+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 19:30:05+00:00| seen|...

CVE-2026-16404

creationtimestamp| type| source ---|---|--- 2026-07-21 13:54:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xhr2hqm27 2026-07-22 04:47:43+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 07:47:10+00:00| seen|...