Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed in the Vulnerability Details section below. This bulletin provides information about the affected components and the...

EUVD-2026-86224

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.43.0, Logto fetches administrator-controlled outbound destinations without validating the address used for the connection. Webhook delivery in packages/core/src/libraries/hook/utils.ts can reach special-use and...

CVE-2026-56739

Logto versions prior to 1.43.0 are vulnerable to Server-Side Request Forgery (SSRF) because the application fails to validate outbound destinations controlled by administrators. Specifically, Webhook delivery in packages/core/src/libraries/hook/utils.ts can access cloud metadata addresses. Additi...

PT-2026-97856

Name of the Vulnerable Software and Affected Versions Logto versions prior to 1.43.0 Description Logto fails to validate addresses used for outbound connections controlled by administrators. This allows requests to reach special-use and cloud metadata addresses via webhook delivery in...

CVE-2026-91803

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

CVE-2026-91803

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader . The root cause is the unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated pri...

CVE-2026-91803 Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

EUVD-2026-85166

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

CVE-2026-91803: Uncontrolled Search Path Element

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

CVE-2026-7866

Stack-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.2.0 before...

CVE-2026-18462

Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional Core Libraries allows Shared Resource Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1...

CVE-2026-18626

Out-of-bounds Read vulnerability in RTI Connext Professional Core Libraries allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.2.0 before 5.2., from...

CVE-2026-18461

Use of Externally-Controlled Format String vulnerability in RTI Connext Professional Core Libraries allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6...

CVE-2026-18458

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in RTI Connext Professional Core Libraries allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.3.0 before...

CVE-2026-18457

Heap-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.2.3 before 5.2...

CVE-2026-18459

Incorrect Calculation vulnerability in RTI Connext Professional Core Libraries allows Abuse Existing Functionality. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.2.0...

CVE-2026-18460

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

CVE-2026-11389

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in RTI Connext Professional Core Libraries allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.3.0 before...

CVE-2026-11388

Double Free vulnerability in RTI Connext Professional Core Libraries allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.1.0 before 7.3.1.6...

EUVD-2026-84618

Out-of-bounds Read vulnerability in RTI Connext Professional Core Libraries allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.2.0 before 5.2., from...