PT-2026-67539

Name of the Vulnerable Software and Affected Versions NASA cFS version 7.0.1 Description A parser boundary flaw exists in the Software Bus Network SBN application's peer subscription message handling. This issue allows an attacker to trigger a Denial of Service DoS by sending a specially crafted...

CVE-2026-67973

An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via replaying final CFDP PDUs...

PT-2026-67540

Name of the Vulnerable Software and Affected Versions NASA cFS version 7.0.1 Description Incorrect access control allows attackers to arbitrarily remove low-index subscriptions and add new streams by sending TO LAB add/remove subscription commands. Recommendations At the moment, there is no...

CVE-2026-67973

An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via replaying final CFDP PDUs...

AI Security Leaderboard: Methodology, Results and Minimal Standard

Frontier AI model developers increasingly rely on layered safeguards to prevent catastrophic misuse, but little public evidence exists on how much protection these safeguards provide, or how consistently across developers. We introduce the FAR.AI Minimal Standard for Safeguards, Version 1.0: a...

PT-2026-67518

An issue in the CF CFDP RecvMd component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure...

CVE-2026-67978

The NASA cFS v7.0.1 software contains a vulnerability in its SBN UDP interface . An attacker can cause a Denial of Service (DoS) by transmitting a crafted SBN frame . No specific details regarding the underlying root cause, exploitation evidence, or remediation are provided in the documents.

CVE-2026-67969

An issue in the HSMonitorApplications component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMonTbl entry...

Security Bulletin: IBM Storage Protect for Space Management is vulnerable to denial of service due to Apache Tomcat (CVE-2025-46392)

Summary IBM Storage Protect for Space Management uses Apache Tomcat as part of its web application infrastructure. A vulnerability in Apache Tomcat could allow a remote attacker to trigger excessive resource consumption, leading to a denial of service condition. IBM Storage Protect for Space...

Security Bulletin: IBM Storage Protect for Space Management is affected by weaker than expected security in IBM WebSphere Application Server Liberty (CVE-2025-14917)

Summary IBM Storage Protect for Space Management uses IBM WebSphere Application Server Liberty as part of its web application runtime. A vulnerability in IBM WebSphere Application Server Liberty could provide weaker than expected security when administering security settings. IBM Storage Protect...

Security Bulletin: IBM Storage Protect for Space Management is vulnerable to server-side request forgery due to IBM WebSphere Application Server Liberty (CVE-2026-1561)

Summary IBM Storage Protect for Space Management uses IBM WebSphere Application Server Liberty as part of its web application runtime. A vulnerability in IBM WebSphere Application Server Liberty could allow a remote authenticated attacker to perform server-side request forgery SSRF, potentially...

Security Bulletin: IBM Storage Protect for Space Management is vulnerable to denial-of-service attack due to commons-lang-2.6.jar (CVE-2025-48924)

Summary Apache Commons lang 2.6 library is used by the IBM Storage Protect Client, BA Client and Data Protection for VMware component. An uncontrolled recursion flaw in ClassUtils.getClass can cause a StackOverflowError when processing specially crafted long inputs, potentially resulting in a...

Security Bulletin: IBM Storage Protect for Space Management is vulnerable to stored cross-site scripting due to Angular (CVE-2025-66412)

Summary IBM Storage Protect for Space Management uses Angular to provide web-based user interface components. A stored cross-site scripting XSS vulnerability in the Angular Template Compiler could allow an attacker to bypass Angular's built-in security sanitization and execute malicious scripts...

Security Bulletin: IBM Storage Protect for Space Management is vulnerable to cross-site scripting due to Angular (CVE-2026-22610)

Summary IBM Storage Protect for Space Management uses Angular to provide web-based user interface components. A cross-site scripting XSS vulnerability in the Angular Template Compiler could allow an attacker to execute arbitrary JavaScript by exploiting insufficient sanitization of href and...

Security Bulletin: IBM Storage Protect for Space Management is vulnerable to cross-site scripting due to Angular (CVE-2026-27970)

Summary IBM Storage Protect for Space Management uses Angular to provide web-based user interface components. A cross-site scripting XSS vulnerability in the Angular internationalization i18n pipeline could allow attacker-controlled JavaScript to execute if a malicious translation file is...

Security Bulletin: IBM Storage Protect for Space Management is vulnerable to privilege escalation due to IBM WebSphere Application Server Liberty (CVE-2025-14915)

Summary IBM Storage Protect for Space Management uses IBM WebSphere Application Server Liberty as part of its web application runtime. A privilege escalation vulnerability in IBM WebSphere Application Server Liberty, when the restConnector-1.0 or restConnector-2.0 feature is enabled, could allow ...

Security Bulletin: IBM Storage Protect for Space Management is vulnerable to denial of service due to jose4j (CVE-2024-29371)

Summary IBM Storage Protect for Space Management uses the jose4j library as part of its security infrastructure. A vulnerability in jose4j could allow an attacker to cause a denial of service DoS by sending a specially crafted JSON Web Encryption JWE token with an exceptionally high compression...

Security Bulletin: IBM Storage Protect for Space Management is affected by an identity spoofing vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-3621)

Summary IBM Storage Protect for Space Management uses IBM WebSphere Application Server Liberty as part of its web application runtime. Under limited conditions, when an application is deployed without authentication and authorization configured, IBM WebSphere Application Server Liberty is...

Security Bulletin: IBM Storage Protect for Space Management is vulnerable to remote code execution due to IBM WebSphere Application Server Liberty (CVE-2025-14914)

Summary IBM Storage Protect for Space Management uses IBM WebSphere Application Server Liberty as part of its web application runtime. A vulnerability in IBM WebSphere Application Server Liberty could allow a privileged user to upload a specially crafted ZIP archive containing path traversal...

Security Bulletin: IBM Storage Protect for Space Management is affected by multiple vulnerabilities in IBM SDK, Java Technology Edition (CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, CVE-2026-22007)

Summary IBM Storage Protect for Space Management includes IBM SDK, Java Technology Edition to support Java-based components. Multiple vulnerabilities in IBM SDK, Java Technology Edition could allow an attacker to obtain unauthorized access to sensitive information or cause a partial denial of...