CVE-2026-101721

A flaw was found in mysql. A remote attacker with high privileges and network access can exploit this vulnerability to cause a Denial of Service DoS. By targeting the server component services, the attacker can cause the database to hang or crash repeatedly, disrupting availability for legitimate...

dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-101752

A flaw was found in the MySQL Server Components Services. A high-privileged remote attacker with network access can exploit this vulnerability under specific conditions to cause a Denial of Service DoS. Successful exploitation allows an attacker to cause the server to hang or crash repeatedly,...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumption issues in FasterXML jackson-databind

Summary IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumption issues in FasterXML jackson-databind. FasterXML jackson-databind is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumptions in FasterXML jackson-core (CVE-2026-89407, CVE-2026-89425)

Summary IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumptions which can result in OutOfMemory Errors in FasterXML jackson-core. FasterXML jackson-core is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in jackson-databind (CVE-2026-68497)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in jackson-databind due to deserializer flaws. Jackson-databind is used in our Speech microservices. This vulnerability has been addressed. Please read the details for remediation below. Vulnerabili...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a use after free issue in zstd-jni (CVE-2026-90852)

Summary Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a use after free issue, due to a flaw in the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. in zstd-jni. Zstd-jni is used in our Speech microservices. This...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in zstd-jni.

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in zstd-jni. Zstd-jni is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-87795 DESCRIPTION: zstd-jni...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read and Infinite Loop condition in zstd-jni (CVE-2026-89045, CVE-2026-89046, CVE-2026-90560)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read and Infinite Loop condition in zstd-jni. Zstd-jni is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details...

ioccheck

ioccheck A tool for simplifying the process of researching file hashes, IP addresses, and other indicators of compromise IOCs. Features Look up hashes across multiple threat intelligence services, from a single command or a few lines of Python. Currenty supports the following services: VirusTotal...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumptions in Spring Framework (CVE-2026-47886, CVE-2026-59283)

Summary IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumptions in Spring Framework, due to flaws with the the power operator and SpEL expression compiler. Spring framework is used in our Speech microservices. These vulnerabilities have been addressed. Please read...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java. Bouncy Castle is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-12185...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java. Bouncy Castle is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-13505...

DEBIAN-CVE-2026-114655

libmongocrypt builds requests to external key management services AWS, Azure and GCP by inserting values from key vault documents, KMS provider configuration and KMS responses into request lines, headers and signed request bodies without validating or encoding them for each context. A user with...

CVE-2026-114655

libmongocrypt builds requests to external key management services AWS, Azure and GCP by inserting values from key vault documents, KMS provider configuration and KMS responses into request lines, headers and signed request bodies without validating or encoding them for each context. A user with...

EUVD-2026-108330

libmongocrypt builds requests to external key management services AWS, Azure and GCP by inserting values from key vault documents, KMS provider configuration and KMS responses into request lines, headers and signed request bodies without validating or encoding them for each context. A user with...

CVE-2026-113873 SmileCDR HAPI FHIR improper data decompression

SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain services when decompressed...

CVE-2026-113873

The SmileCDR HAPI FHIR software is vulnerable to a denial-of-service attack because it does not properly handle highly compressed data (CWE-409 ). An unauthenticated attacker can send compressed payloads that, upon decompression, exhaust the server heap or crash specific services. To mitigate thi...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Golang go

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Golang go which can result in an Out-of-bounds Read, Infinite Loop, or Improper Validation condition. Golang go is used in our Speech utilities. These vulnerabilities have been addressed. Please read the details for...