PT-2026-83325

Name of the Vulnerable Software and Affected Versions IBM Administration Runtime Expert for i version 1R1M0 Description Improper authentication enforcement may allow a remote authenticated attacker to obtain sensitive information. Recommendations At the moment, there is no information about a new...

CVE-2026-18545: Server-Side Request Forgery (SSRF)

IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2026-18904: Authorization Bypass Through User-Controlled Key

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive information and inject unauthorized messages due to a namespace collision between user identifiers...

PT-2026-83328

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.1 Description Remote authenticated attackers can execute arbitrary code due to improper control over the generation of code. Recommendations At the moment, there is no information about a newer...

Security Bulletin: Security Vulnerability in Jetty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-11143)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Jetty. Vulnerability Details CVEID:CVE-2025-11143 DESCRIPTION: The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing ...

Security Bulletin: Security Vulnerability in Apache Struts affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-66675)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Struts Vulnerability Details CVEID:CVE-2025-66675 DESCRIPTION: Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issu...

Security Bulletin: Security Vulnerability in Jetty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-5115)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Jetty Vulnerability Details CVEID:CVE-2025-5115 DESCRIPTION: In Eclipse Jetty, versions =9.4.57, =10.0.25, =11.0.25, =12.0.21, =12.1.0.alpha2, an HTTP/2 client may trigger the server to send...

Security Bulletin: Security Vulnerability in logback affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-11226)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to logback libraries. Vulnerability Details CVEID:CVE-2025-11226 DESCRIPTION: ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18...

Security Bulletin: Security Vulnerability in Apache Shiro affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-43828)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Shiro Vulnerability Details CVEID:CVE-2026-43828 DESCRIPTION: Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects...

Security Bulletin: Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-3482)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed Access Control security vulnerability. Vulnerability Details CVEID:CVE-2026-3482 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0...

Security Bulletin: Security Vulnerability in Apache Kafka affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-35554, CVE-2026-33558)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the vulnerability. Vulnerability Details CVEID:CVE-2026-33558 DESCRIPTION: Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and responses...

Security Bulletin: Security Vulnerability in Spring Security affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-22228)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Spring Security Vulnerability Details CVEID:CVE-2025-22228 DESCRIPTION: BCryptPasswordEncoder.matchesCharSequence,String will incorrectly return true for passwords larger than 72 characters as lo...

Security Bulletin: Security Vulnerability in Eclipse Jetty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-1605)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Eclipse Jetty Vulnerability Details CVEID:CVE-2026-1605 DESCRIPTION: In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP...

Security Bulletin: Security Vulnerability in Axios affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-40175)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Axios Vulnerability Details CVEID:CVE-2026-40175 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific...

Security Bulletin: Security Vulnerability in Spring MVC affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38828)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Spring MVC Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack. CWE:CWE-400: Uncontroll...

Security Bulletin: SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-7253)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the SQL injection vulnerability. Vulnerability Details CVEID:CVE-2026-7253 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send speciall...

Security Bulletin: Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI (CVE-2026-3157)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to information disclosure in mailbox UI. Vulnerability Details CVEID:CVE-2026-3157 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026 CPU

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-41254, CVE-2026-47057, CVE-2026-47063, CVE-2026-47058, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027, CVE-2026-47021, CVE-2026-46917, CVE-2026-47059, CVE-2026-47010, CVE-2026-16439, CVE-2026-16441, CVE-2026-1624...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses js-yaml-4.1.1.tgz which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses js-yaml-4.1.1.tgz which is vulnerable to CVE-2026-53550, CVE-2026-59869. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-53550 DESCRIPTION: js-yaml is a JavaScript YAML parser and...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses kafka_python-2.3.0-py2.py3-none-any.wh which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor Component uses kafkapython-2.3.0-py2.py3-none-any.wh which is vulnerable to CVE-2026-10142, CVE-2026-10143. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-10142 DESCRIPTION: kafka-python prior to...