Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in js-yaml

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in js-yaml. CVE-2026-84375 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-84375 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 3.0.0...

Security Bulletin: Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in multer

Summary Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in multer. CVE-2026-77037, CVE-2026-77063, CVE-2026-77078, CVE-2026-82333 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-77037 DESCRIPTION: multer is a middleware for handling...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/crypto

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/crypto. CVE-2026-56854 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-56854 DESCRIPTION: The source-address critical option in the...

ph0neutria

ph0neutria rastreador de malware ph0neutria v1.0.1 https://github.com/phage-nz/ph0neutria Nota: Este proyecto no se mantiene activamente. Acerca de ph0neutria es un constructor de zoológicos de malware que obtiene muestras directamente de la naturaleza. Todo se almacena en Viper para facilitar el...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them as SCSI devices in a guest VM. I/O to the vFC device is handled by the...

Security Bulletin:IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data

Summary WmServiceMock is bundled with IBM webMethods Integration Server. Fixes are now available. Remediation steps are provided below CVE-2026-12118 Vulnerability Details CVEID:CVE-2026-12118 DESCRIPTION: IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote...

CVE-2026-86834

The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root on every form submission when its HubSpot Forms integration is enabled, allowing unauthenticated attackers to read upstream API response data, including correlation identifiers an...

CVE-2026-86834 MetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms Integration

The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root on every form submission when its HubSpot Forms integration is enabled, allowing unauthenticated attackers to read upstream API response data, including correlation identifiers an...

EUVD-2026-91940

The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root on every form submission when its HubSpot Forms integration is enabled, allowing unauthenticated attackers to read upstream API response data, including correlation identifiers an...

CVE-2026-86834 MetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms Integration

The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root on every form submission when its HubSpot Forms integration is enabled, allowing unauthenticated attackers to read upstream API response data, including correlation identifiers an...

CVE-2026-95385

An inappropriate implementation flaw was found in the PlatformIntegration component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517192965...

CVE-2026-86834: Exposure of Sensitive Information to an Unauthorized Actor

The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root on every form submission when its HubSpot Forms integration is enabled, allowing unauthenticated attackers to read upstream API response data, including correlation identifiers an...

PT-2026-104526

Name of the Vulnerable Software and Affected Versions MetForm WordPress plugin versions prior to 4.3.1 Description When the HubSpot Forms integration is enabled, the plugin fails to properly restrict access to a debug file created in the web root during every form submission. This allows...

Security Bulletin: IBM QRadar SIEM interation for Microsoft Azure Event Hub contains components with known vulnerabilities

Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM integration with Microsoft Azure Event Hub Vulnerability Details CVEID:CVE-2026-66257 DESCRIPTION: A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion...

CVE-2026-59265

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

CVE-2026-59265 Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

CVE-2026-59265 Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

CVE-2026-59265 Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

CVE-2026-59265

Apache OpenOffice versions up to and including v4.1.16 are vulnerable to a code execution issue in the Java integration . A crafted untrusted spreadsheet can trigger the execution of arbitrary code—including remote code—when opened by a user. The attack exploits the database range feature, where ...

EUVD-2026-91764

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...