dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-101752

A flaw was found in the MySQL Server Components Services. A high-privileged remote attacker with network access can exploit this vulnerability under specific conditions to cause a Denial of Service DoS. Successful exploitation allows an attacker to cause the server to hang or crash repeatedly,...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2024-37891...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues. We have performed updates to the Operators used by our Speech Services. The following vulnerabilities have been addressed in this update. Please read the details for remediation below. Vulnerability...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Protection Mechanism Failure in Sudo (CVE-2026-82474)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Protection Mechanism Failure in Sudo due to a failure to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Sudo is used in our Speech Service Runtimes. This vulnerability has been addressed...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Incorrect Calculation of Buffer Size in rsyslog (CVE-2026-78002)

Summary IBM Watson Speech Services Cartridge is vulnerable to Incorrect Calculation of Buffer Size in rsyslog due to a flaw in the RainerScript replace function. Rsyslog is used in our Speech Service Runtimes. This vulnerability has been addressed. Please read the details for remediation below...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in libcurl (CVE-2026-8458, CVE-2026-8927)

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in libcurl, including Exposure of Data Element to Wrong Session and Authentication Bypass by Capture-replay. Libcurl is used in our Speech Service Runtimes. These vulnerabilities have been addressed. Please read the...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in virtualenv

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in virtualenv including OS Command Injection, CRLF Injection, and Download of Code Without Integrity Check. Virtualenv is used in our Speech Service Runtimes. These vulnerabilities have been addressed. Please read the...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in Expat (CVE-2026-66046, CVE-2026-93990)

Summary IBM Watson Speech Services Cartridge is vulnerable to a DOS in Expat caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in libxml2

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in libxml2. Libxml2 is used in our Speech Service Runtimes. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-74860 DESCRIPTION: A flaw was...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Improper Certificate Validation in Netty (CVE-2026-100665)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Improper Certificate Validation in Netty due to an incomplete hostname verification fix in the QUIC certificate verification path when using a plain X509TrustManager. Netty is used in our Speech microservices. This vulnerability has...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Heap-based Buffer Overflow in NLnet Labs Unbound (CVE-2026-81642, CVE-2026-81634, CVE-2026-82717)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Heap-based Buffer Overflow in NLnet Labs Unbound that could result in remote code execution and DOS conditions. NLnet Labs Unbound is used as part of our Speech microservices. These vulnerabilities have been addressed. Please read th...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Netty's HTTP/3 codec

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Netty's HTTP/3 codec. Netty is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-100659 DESCRIPTION:...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumption issues in FasterXML jackson-databind

Summary IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumption issues in FasterXML jackson-databind. FasterXML jackson-databind is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumptions in FasterXML jackson-core (CVE-2026-89407, CVE-2026-89425)

Summary IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumptions which can result in OutOfMemory Errors in FasterXML jackson-core. FasterXML jackson-core is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat WebSocket

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat WebSocket. Apache Tomcat is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-87022...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Netty.

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Netty. Netty is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-93565 DESCRIPTION: A flaw was found in...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat.

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat. Apache Tomcat is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-77756 DESCRIPTION:...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an OutOfMemoryError and HTTP Request/Response Smuggling in Netty (CVE-2026-89044, CVE-2026-93488)

Summary IBM Watson Speech Services Cartridge is vulnerable to an OutOfMemoryError and HTTP Request/Response Smuggling in Netty. Netty is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details...