Security Bulletin: Vulnerability in Spring-core affects IBM Netezza Appliance

Summary The Spring-core package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41838 Vulnerability Details CVEID:CVE-2026-41838 DESCRIPTION: IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which...

ROOT-APP-NPM-CVE-2022-23540 CVE-2022-23540 in jsonwebtoken - Patched by Root

Root has patched CVE-2022-23540 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...

Security Bulletin: Vulnerability in tar affects IBM Netezza Appliance

Summary The tar package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-59873 Vulnerability Details CVEID:CVE-2026-59873 DESCRIPTION: node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard uppe...

Security Bulletin: Vulnerability in tar affects IBM Netezza Appliance

Summary The tar package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-59874 Vulnerability Details CVEID:CVE-2026-59874 DESCRIPTION: node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-vali...

Security Bulletin: IBM Transformation Extender Advanced is affected by a IBM WebSphere Application Server Liberty vulnerability

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, is vulnerable to IBM WebSphere Application Server Liberty's HTTP request smuggling vulnerability CVE-2026-11541 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...

ROOT-APP-NPM-CVE-2021-21353 CVE-2021-21353 in pug - Patched by Root

Root has patched CVE-2021-21353 in the pug package for Root:npm. Multiple fixed versions available...

Critical: Red Hat Security Advisory: RHOAI 3.4.3 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI. Release of RHOAI 3.4.3 provides these changes:...

SUSE CVE-2026-58427

Private org member list leaked via /members API endpoint - incomplete fix for PR 38145...

PT-2026-70388

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue exists where the allocation of resources occurs without limits or throttling, which allows an unauthorized attacker to cause a denial-of-service condition over a network...

PT-2026-70073

Name of the Vulnerable Software and Affected Versions Axis Signed Video Framework affected versions not specified Description The Signed Video Framework contains a buffer overflow issue, which occurs when a program writes more data to a block of memory than it can hold. This flaw can cause...

PT-2026-70579

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-70437

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

PT-2026-70050

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to sufficiently sanitize certain request headers before forwarding traffic to internal components. This allows an unauthenticated attacker to send a specially crafte...

PT-2026-70654

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An out-of-bounds read in Windows GDI allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At the moment, there is no...

PT-2026-70411

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A null pointer dereference in Windows TCP/IP allows an unauthorized attacker to cause a denial of service over a network. A null pointer dereference occurs when a program attempts to...

Linux Distros Unpatched Vulnerability : CVE-2026-19546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation plea...

PT-2026-70492

Name of the Vulnerable Software and Affected Versions Windows Wired AutoConfig Service affected versions not specified Description A buffer over-read in the Windows Wired AutoConfig Service allows an authorized attacker to disclose sensitive information locally, which can affect the system...

PT-2026-70416

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description The use of an uninitialized resource in the Windows Event Logging Service allows an authorized attacker to disclose information locally. Recommendations At the moment,...

PT-2026-70829

Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.16.0 Description The dtls server input handler and create new connected udp socket functions in src/apps/relay/dtls listener.c retain the state of the OpenSSL dtls1 reassemble fragment function when processing a...

PT-2026-70076

Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description Improper validation of the specified quantity in input allows for input data manipulation. Recommendations At the moment, there is no information about a newer version tha...