CVE-2026-19649 IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of database credentials...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

Summary IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs. Vulnerability Details CVEID:CVE-2026-17440 DESCRIPTION: IBM App Connect Enterprise could allow a local attacker to cause a denial of service due to uncontrolled recursion. CWE:CWE-67...

PT-2026-85748

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of credentials...

PT-2026-85591

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of database credentials...

CVE-2026-16689: Insertion of Sensitive Information into Log File

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of credentials...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rails, ruby4.0-rails, ruby3.2-rails, kube-logging-operator, pact-broker-docker, pact-broker-docker-fips...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rails, ruby4.0-rails, ruby3.2-rails, kube-logging-operator, pact-broker-docker, pact-broker-docker-fips...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

org.mongodb/mongodb-driver: MongoDB Driver: Credential disclosure via cleartext logging during client initialization

A flaw was found in org.mongodb/mongodb-driver. During routine client initialization, sensitive configuration information, including credentials for outbound network connectivity, is written to application log output in cleartext. A local attacker with the ability to read the affected application...

EUVD-2026-70409

SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search requests exceed timing thresholds. Authenticated attackers can read the log file via the getFile endpoint to recover admin API tokens and gain permanent administrative access...

CVE-2026-85174 SiYuan before v3.8.2 API Token Exposure via Log File

SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search requests exceed timing thresholds. Authenticated attackers can read the log file via the getFile endpoint to recover admin API tokens and gain permanent administrative access...

CVE-2026-85174

SiYuan before v3.8.2 is vulnerable to API token exposure via its log file. When full-text search requests exceed timing thresholds, API tokens passed in query parameters are written in plaintext to an accessible log file. An authenticated attacker can retrieve the log file through the getFile end...

CVE-2026-85171 n8n before 1.123.73 Credential Exposure via Error Logging

n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, and Mailcheck nodes. These nodes send their decrypted credentials to the authentication endpoint via the raw legacy HTTP helper outside any error handling, causing the plaintext secret to...

CVE-2026-85171 n8n before 1.123.73 Credential Exposure via Error Logging

n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, and Mailcheck nodes. These nodes send their decrypted credentials to the authentication endpoint via the raw legacy HTTP helper outside any error handling, causing the plaintext secret to...

CVE-2026-85171 n8n before 1.123.73 Credential Exposure via Error Logging

n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, and Mailcheck nodes. These nodes send their decrypted credentials to the authentication endpoint via the raw legacy HTTP helper outside any error handling, causing the plaintext secret to...

CVE-2026-85171

n8n versions before 1.123.73 , 2.35.4 , and 2.36.2 are affected by a credential exposure vulnerability in the Strapi , SeaTable , and Mailcheck nodes. The root cause is that these nodes send their decrypted credentials to the authentication endpoint via the raw legacy HTTP helper outside any erro...

The vulnerability of Windows Event Logging, a service in the Windows operating system, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Windows Event Logging service is related to the improper saving of generated signatures due to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2026-85006

SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search requests exceed timing thresholds. Authenticated attackers can read the log file via the getFile endpoint to recover admin API tokens and gain permanent administrative access...