Security Bulletin: IBM MQ is affected by multiple CVEs (CVE-2025-11187, CVE-2025-15467, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796)

Summary Multiple issues were identified with OpenSSL, which IBM MQ on the IBM i platform uses within the Advanced Message Security feature to provide cryptographic functionality. It is not used for transport layer security TLS functionality for IBM MQ channel connections, which is provided by the...

EUVD-2010-2643

Malware in sbrugna...

EUVD-2021-24826

Malware in sbrugna...

EUVD-2013-4985

Malware in sbrugna...

EUVD-2014-0395

Malware in sbrugna...

EUVD-2006-3164

Malware in sbrugna...

EUVD-2021-21711

Malware in sbrugna...

EUVD-2019-7044

Malware in sbrugna...

EUVD-2005-4598

Malware in sbrugna...

EUVD-2020-12728

Malware in sbrugna...

EUVD-2020-28366

Malware in sbrugna...

EUVD-2011-1085

Malware in sbrugna...

EUVD-2024-42266

Malicious code in bioql PyPI...

EUVD-2023-53780

Malicious code in bioql PyPI...

EUVD-2024-42756

Malicious code in bioql PyPI...

CVE-2025-52464 Meshtastic Repeated Public and Private Keypairs

Meshtastic is an open source mesh networking solution. In versions from 2.5.0 to before 2.6.11, the flashing procedure of several hardware vendors was resulting in duplicated public/private keys. Additionally, the Meshtastic was failing to properly initialize the internal randomness pool on some...

CVE-2025-48487 FreeScout Vulnerable to Stored XSS

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, when creating a translation of a phrase that appears in a flash-message after a completed action, it is possible to inject a payload to exploit XSS vulnerability. This issue has been patched in version 1.8.180...

CVE-2024-44207

This issue was addressed with improved checks. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. Audio messages in Messages may be able to capture a few seconds of audio before the microphone indicator is activated...

CVE-2022-4870

In affected versions of Octopus Deploy it is possible to discover network details via error message...

CVE-2019-16237

Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313messagearchivemanagement.vala...