Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Netty has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

Exploit for CVE-2026-112816

lxd-scanner Local triage for CVE-2026-112816, the 10.0...

Exploit for CVE-2026-112816

CVE-2026-112816 — LXD / MicroCloud client-certificate chain au...

CVE-2026-111814

A flaw was found in Apache Traffic Server. Its default outbound session-sharing policy can reuse an existing Transport Layer Security TLS connection authenticated with one client certificate for a transaction configured to present a different certificate. A remote attacker could exploit this flaw...

CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client's public certificate. Once in, the attacker would act as that...

CVE-2026-29145-Tester

CVE-2026-29145 Testing Environment 📌 Overview This repository contains a proof-of-concept PoC environment designed to test for CVE-2026-29145. The vulnerability is an authentication bypass in Apache Tomcat's Mutual TLS CLIENTCERT implementation. When OCSP Online Certificate Status Protocol is...

pared

Pared Pared is a secure, high-performance Linux host security control plane and real-time administrative web console written in Crystal. Built on Kemal and Blueprint server-rendered components with SQLite3, a small vanilla-JS/WebSocket layer, and native libsystemd journal streaming, it unifies...

CVE-2026-29145-Tester

CVE-2026-29145 Testing Environment 📌 Overview This repository contains a proof-of-concept PoC environment designed to test for CVE-2026-29145. The vulnerability is an authentication bypass in Apache Tomcat's Mutual TLS CLIENTCERT implementation. When OCSP Online Certificate Status Protocol is...

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TLS, where the serve...

Node.js 26.5.0 HTTPS Agent PFX Client Identity Collision

Node.js versions 22.x, 24.x, and 26.x contain an HTTPS Agent connection reuse flaw that can reuse mutual TLS client identities across requests configured with different PFX client certificates. The supplied tool performs offline comparison of operator-reported versions against fixed releases...

Security Bulletin: Multiple Security Vulnerabilities in Netty affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed these security vulnerabilities Vulnerability Details CVEID:CVE-2026-59902 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final,...

Exploit for CVE-2026-97629

CVE-2026-97629 — nginx TLS session-ticket forgery client-cert...

Atlassian Confluence < 9.2.26 / 9.3.x < 10.2.19 / 11.0.0 (CONFSERVER-104520)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104520 advisory. - Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final,...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2026-75595, CVE-2026-75596, CVE-2026-62243)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-75595 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final,...

Atlassian Jira Service Management Data Center and Server 5.9.x < 10.3.25 / 10.4.x < 11.3.11 (JSDSERVER-16781)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16781 advisory. - Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and...

io.netty/netty-handler: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext

A flaw was found in Netty, an asynchronous, event-driven network application framework. An unauthenticated remote attacker can exploit fragmented Transport Layer Security TLS ClientHello messages to bypass the Server Name Indication SNI routing mechanism. This forces a fallback to a less secure...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the System.Net.Security process. An attacker can bypass mutual TLS client authentication by presenting an invalid or unauthorized client certificate, potentially gaining unauthorized access to resource...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the System.Net.Security process. An attacker can bypass mutual TLS client authentication by presenting an invalid or unauthorized client certificate, potentially gaining unauthorized access to resource...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the System.Net.Security process. An attacker can bypass mutual TLS client authentication by presenting an invalid or unauthorized client certificate, potentially gaining unauthorized access to resource...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the System.Net.Security process. An attacker can bypass mutual TLS client authentication by presenting an invalid or unauthorized client certificate, potentially gaining unauthorized access to resource...