PT-2026-114037

🚨 CVE-2026-110595 BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in read upload that reads entire CSV uploads before enforcing the 5 MB limit. Authenticated users with mass-import permission can send oversized CSV files concurrently to /api/contacts/import/...

IBM Sterling B2B Integrator File Read Upload

The vulnerability of the IBM Sterling B2B Integrator software for automating business processes is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to read or upload files by using the password-changing mechanism...