CVE-2026-77341

cpp-httplib (a C++ header-only HTTP/HTTPS library) version 0.49.0 is vulnerable to CRLF injection in its chunked-response trailer output path. Unlike every other header-writing path in the library, the trailer-writing code applies no field-name or field-value checks to reject carriage return and ...

CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

CVE-2026-77341 cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

WebOb: Open redirect in Location header normalization via leading C0 control / space characters

Summary This is a third follow-up to CVE-2024-42353 / GHSA-mg3v-6m49-jhp3 and CVE-2026-44889 / GHSA-fh3h-vg37-cc95. WebOb makes the Location header absolute when it serves a redirect. To stop a relative or protocol-relative target from redirecting users off-host, it checks the value for a URI...

GHSA-6HX8-3WJJ-GR8G WebOb: Open redirect in Location header normalization via leading C0 control / space characters

Summary This is a third follow-up to CVE-2024-42353 / GHSA-mg3v-6m49-jhp3 and CVE-2026-44889 / GHSA-fh3h-vg37-cc95. WebOb makes the Location header absolute when it serves a redirect. To stop a relative or protocol-relative target from redirecting users off-host, it checks the value for a URI...

Security Bulletin: Security Vulnerability in Spring MVC affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38828)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Spring MVC Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack. CWE:CWE-400: Uncontroll...

Security Bulletin: SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-7253)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the SQL injection vulnerability. Vulnerability Details CVEID:CVE-2026-7253 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send speciall...

Security Bulletin: Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI (CVE-2026-3157)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to information disclosure in mailbox UI. Vulnerability Details CVEID:CVE-2026-3157 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jetty-server jar (CVE-2026-10051, CVE-2026-6790)

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-10051 and CVE-2026-6790 reported for jetty-server-12.0.25.jar Vulnerability Details CVEID:CVE-2026-10051 DESCRIPTION: In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026 CPU

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-41254, CVE-2026-47057, CVE-2026-47063, CVE-2026-47058, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027, CVE-2026-47021, CVE-2026-46917, CVE-2026-47059, CVE-2026-47010, CVE-2026-16439, CVE-2026-16441, CVE-2026-1624...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in jetty-ee8-security jar (CVE-2026-10050)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-10050 reported for jetty-ee8-security-12.0.25.jar Vulnerability Details CVEID:CVE-2026-10050 DESCRIPTION: In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

Wordfence Argus: Moving Beyond Human Research Capability

When you create an AI agent that makes a breakthrough that is so difficult to understand that you need to ask it to write a blog post to explain it to you, you know you're on to something. If you're paying attention, you should have noticed that the major vulnerability we recently reported in one...

Security Bulletin:IBM SPSS Analytic Server is affected by an Eclipse Vert.x vulnerability that could expose credentials through cross-origin HTTP redirects

Summary IBM SPSS Analytic Server is affected by an Eclipse Vert.x vulnerability that could expose credentials through cross-origin HTTP redirects. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-15075 DESCRIPTION: In Eclipse Vert.x versions up to and...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses js-yaml-4.1.1.tgz which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses js-yaml-4.1.1.tgz which is vulnerable to CVE-2026-53550, CVE-2026-59869. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-53550 DESCRIPTION: js-yaml is a JavaScript YAML parser and...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses kafka_python-2.3.0-py2.py3-none-any.wh which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor Component uses kafkapython-2.3.0-py2.py3-none-any.wh which is vulnerable to CVE-2026-10142, CVE-2026-10143. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-10142 DESCRIPTION: kafka-python prior to...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses postcss-8.4.38.tgz package which is vulnerable to CVE-2026-45623.

Summary IBM Maximo Application Suite - Monitor Component uses postcss-8.4.38.tgz which is vulnerable to CVE-2026-45623. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-45623 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses WebSphere Application Server Liberty which is vulnerable to CVE-2026-5516, CVE-2026-4410. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-5516 DESCRIPTION: IBM WebSphere Application...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses ws-7.5.11.tgz which is vulnerable to CVE-2026-62389.

Summary IBM Maximo Application Suite - Monitor Component uses ws-7.5.11.tgz which is vulnerable to CVE-2026-62389. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-62389 DESCRIPTION: Rejected reason: This CVE ID has been rejected or withdrawn b...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor Component uses ip-address-9.0.5.tgz, postcss-8.4.38.tgz, postcss-8.4.48.tgz, postcss-8.5.6.tgz, requests-2.32.4-py3-none-any.whl, requests-2.32.5-py3-none-any.whl which are vulnerable to CVE-2026-42338, CVE-2026-41305, CVE-2026-25645. This bulletin...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses cryptography which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses cryptography which is vulnerable to CVE-2026-69247, CVE-2026-69248, CVE-2026-69249. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION: cryptography is a package...