Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Netty

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in Netty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-93492 DESCRIPTION: A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS...

Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition

Summary Multiple vulnerabilities were addressed in IBM Tivoli Network Manager IP Edition 4.2.0.25 IF1 Vulnerability Details CVEID:CVE-2026-17508 DESCRIPTION: In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the...

Security Bulletin: z Open Editor and RSE CLI uses sdk-1.30.0.tgz which is vulnerable to CVE-2026-104850

Summary Security Bulletin: z Open Editor and RSE CLI uses sdk-1.30.0.tgz which is vulnerable to CVE-2026-104850 Vulnerability Details CVEID:CVE-2026-104850 DESCRIPTION: MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and...

Security Bulletin: Vulnerabilities found in Watson Data Intelligence

Summary Multiple Vulnerabilities were addressed in Watson Data Intelligence version 5.3.1 Patch15 Vulnerability Details CVEID:CVE-2026-69153 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to...

Security Bulletin: Security vulnerability has been detected in IBM Security Verify Governance Identity Manager Adapters

Summary IBM Security Verify Governance Identity Manager Adapters are affected by a security vulnerability in the jackson-databind-2.22.1.jar component Vulnerability Details CVEID:CVE-2026-68497 DESCRIPTION: jackson-databind binds a JSON string to a javax.xml.datatype.Duration or...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.100 security and extras update

Red Hat OpenShift Container Platform release 4.12.100 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of Lo...

Eclipse Foundation Eclipse Milo

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.72 security and extras update

Red Hat OpenShift Container Platform release 4.13.72 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Low...

Security Bulletin: Multiple vulnerabilties in IBM Rational Functional Tester / DevOps Test UI

Summary Multiple vulnerabilities addressed in DevOps Test UI in version 12.0.0 Vulnerability Details CVEID:CVE-2026-45736 DESCRIPTION: ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close implementation is vulnerable to uninitialized memory disclosure...

Security Bulletin: Multiple vulnerabilties in IBM Rational Functional Tester / DevOps Test UI

Summary Multiple vulnerabilities addressed in DevOps Test UI in version 11.0.9 Vulnerability Details CVEID:CVE-2026-33671 DESCRIPTION: Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service ReDoS when...

pfsense-pppoe-secret-bang

abraxaslabs.tech · github.com/abraxas ·&...

Improper Adherence to Coding Standards

Overview org.webjars.npm:nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Improper Adherence to Coding Standards in the checkChar method of the Tokenizer class in src/addressparser/index.ts, where operatorExpecting hol...

Improper Adherence to Coding Standards

Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Improper Adherence to Coding Standards in the checkChar method of the Tokenizer class in src/addressparser/index.ts, where operatorExpecting holds a single...

CLEANSTART-2026-TT67272 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Security vulnerability affects the nfs-subdir-external-provisioner package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate...

Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2025-36069

Summary The Web UI and REST interfaces did not properly invalidate active user sessions after security-sensitive account changes, including password changes, password resets, or role and privilege updates, allowing previously issued session tokens to remain valid and potentially be reused to acce...

Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2025-36252

Summary The Web UI did not generate a new session identifier following successful user authentication, allowing a pre-authentication session identifier to remain associated with the authenticated session. An attacker who could obtain or cause a user's browser to use a known session identifier...

Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2026-19178

Summary The Web UI and REST interfaces allowed users with administrative-level role-mapping privileges to modify their own role mapping, creating a race condition in which a user could potentially preserve or restore elevated privileges while an administrator was changing the user's role. This...

Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2025-36061

Summary The Web UI allowed an authenticated user with administrative privileges to generate a large number of email notifications by submitting multiple user creation requests, potentially resulting in email flooding and impacting the readability and usability of recipients' mailboxes. The issue...

Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2026-19133

Summary The Web UI and REST interfaces did not properly enforce authorization when processing password modification requests, allowing a lower-privileged user to potentially use their own authenticated session to modify another user's password and gain access to the affected account. The issue ha...

...[ More ]

SmarterMail contains multiple vulnerabilities that can be chained to achieve remote code execution with NT AUTHORITY\SYSTEM privileges. The issues include a mutation-based cross site scripting vulnerability involving iCalendar attachments, improper session token invalidation that allows...