Security Bulletin: Multiple vulnerabilities in the Linux kernel and expat affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in the kernel and expat components affect IBM Storage Virtualize products and could cause denial of service and privilege escalation impacts. CVE-2026-43284 CVE-2023-53373 CVE-2025-59375 Vulnerability Details CVEID:CVE-2026-43284 DESCRIPTION: In the Linux kernel, the...

Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to axios (CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036, CVE-2026-42037, CVE-2026-42038, CVE-2026-42039, CVE-2026-42040, CVE-2026-42041, CVE-2026-42042, CVE-2026)

Summary Axios is vulnerable to Prototype Pollution / Transport Hijacking ,HTTP Request/Response Splitting via Gadget ,NOPROXY Protection Bypass ,Denial of Service DoS via Uncontrolled Recursion ,SSRF via Incomplete Proxy Bypass ,JSON API Response Manipulation via Prototype Pollution,XSRF Token...

Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to axios (CVE-2025-62718, CVE-2026-40175)

Summary Axios is vulnerable to infrastructure tampering and Critical SSRF and exposure of private internal/loopback endpoints attacks. These vulnerabilities affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2025-62718 DESCRIPTION: Axios is a promise based HTTP client for the browser an...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to axios (CVE-2025-62718)

Summary Axios is vulnerable to proxy bypass and SSRF vulnerabilities allowing attackers to reach sensitive loopback or internal services despite the configured protections. Vulnerability Details CVEID:CVE-2025-62718 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to axios-1.12.2.tgz (CVE-2026-25639, CVE-2026-39865)

Summary Axios is vulnerable to a Improper Check for Unusual or Exceptional Conditions Complete Denial of Service DoS, Uncontrolled Resource Consumption forcefully crashing the client application backend attacks. This vulnerability affects IBM Spectrum Control. Vulnerability Details...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to Handlebars (CVE-2026-33937, CVE-2026-33938, CVE-2026-33939, CVE-2026-33940, CVE-2026-33941)

Summary Handlebars is vulnerable to Code Injection ,Improper Check for Unusual or Exceptional Conditions and Cross-site Scripting attacks. These vulnerabilities affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2026-33937 DESCRIPTION: Handlebars provides the power necessary to let user...

Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to multer-2.0.1.tgz (CVE-2025-7338 ,CVE-2026-2359 ,CVE-2026-3304 ,CVE-2026-3520)

Summary multer is vulnerable to Uncaught Exception,Missing Release of Resource after Effective Lifetime,Incomplete Cleanup,Uncontrolled Recursion attacks. These vulnerabilities affect IBM Spectrum Control Vulnerability Details CVEID:CVE-2025-7338 DESCRIPTION: Multer is a node.js middleware for...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to picomatch-2.2.2.tgz (CVE-2026-33671, CVE-2026-33672)

Summary picomatch is vulnerable to a Inefficient Regular Expression Complexity DOS, Improperly Controlled Modification of Object Prototype Attributes / Prototype Reference attacks. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2026-33671 DESCRIPTION: Picomatch i...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to immutable-4.3.5.tgz (CVE-2026-29063)

Summary Immutable is vulnerable to a Prototype Pollution attack. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2026-29063 DESCRIPTION: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to Zlib (CVE-2026-3381)

Summary Zlib is vulnerable to Remote Code Execution ,Denial of Service DoS, Arbitrary File/Data Overwrite, Sensitive Information Disclosure attacks. These vulnerabilities affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2026-3381 DESCRIPTION: Compress::Raw::Zlib versions through 2.219...

Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to multer-1.4.2.tgz (CVE-2026-3520)

Summary Multer is vulnerable to DOS attack. These vulnerabilities affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2026-3520 DESCRIPTION: Multer is a node.js middleware for handling multipart/form-data. A vulnerability in Multer prior to version 2.1.1 allows an attacker to trigger a...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to multer-1.4.2.tgz (CVE-2025-47935, CVE-2026-2359, CVE-2026-3304)

Summary Multer is vulnerable to Missing Release of Memory after Effective Lifetime, Missing Release of Resource after Effective Lifetime, Incomplete Cleanup attacks. These vulnerabilities affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2025-47935 DESCRIPTION: Multer is a node.js...

Security Bulletin: IBM Spectrum Control is vulnerable to a weaknesses related to pdfmake-0.2.10.tgz (CVE-2025-11362)

Summary Pdfmake is vulnerable to a Allocation of Resources Without Limits or Throttling attack. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2025-11362 DESCRIPTION: Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to dojo.profile-1.9.7.js (CVE-2021-23450, CVE-2008-6681, CVE-2010-2273)

Summary dojo.profile is vulnerable to Prototype Pollution flaw, Cross-Site Scripting XSS attacks. These vulnerabilities affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2021-23450 DESCRIPTION: All versions of package dojo are vulnerable to Prototype Pollution via the setObject functio...

Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to IBM SDK, Java Technology Edition Quarterly CPU - Oct 2024 (CVE-2024-21235,CVE-2024-21217,CVE-2024-21210,CVE-2024-21208,CVE-2024-10917)

Summary IBM SDK, Java Technology Edition Quarterly CPU - Oct 2024 is vulnerable to a Side-Channel / Data Tampering Logic Errors , Deserialization of Untrusted Data , Observable Discrepancy , Integer Overflow or Wraparound attacks. This vulnerability affects IBM Spectrum Control. Vulnerability...

Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to IBM WebSphere Application Server Liberty (CVE-2024-40094)

Summary IBM WebSphere Application Server Liberty is vulnerable to denial of service attack. These vulnerabilities affect IBM Spectrum Control Vulnerability Details CVEID:CVE-2024-40094 DESCRIPTION: GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENF...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to qs-6.13.0.tgz (CVE-2026-2391)

Summary qs is vulnerable to a Improper Input Validation attack. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2026-2391 DESCRIPTION: Summary The arrayLimit option in qs does not enforce limits for comma-separated values when comma: true is enabled, allowing...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to IBM WebSphere Application Server Liberty (CVE-2025-14914)

Summary Immutable is vulnerable to a Path Traversal / "Zip Slip" attack. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2025-14914 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archiv...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to axios-1.12.2.tgz (CVE-2026-25639)

Summary Immutable is vulnerable to a Denial of Service attack. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2026-25639 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function i...

Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to IBM SDK, Java Technology Edition Quarterly CPU - Jan 2026 (CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925)

Summary IBM SDK, Java Technology Edition Quarterly CPU - Jan 2026 is vulnerable to a Uncontrolled Resource Consumption, Security Control Bypass, Low-Impact High-Complexity Data Bypass attacks. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2026-21945 DESCRIPTION:...