Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: bpf, testrun: Fix use-after-free issue in ethskbpkttype KMSAN reported a use-after-free issue in ethskbpkttype1. The cause of the issue was that ethskbpkttype accessed skb’s data that did not contain an Ethernet header. This occu...

Security Bulletin: IBM Optim Test Data Management 1.0.0, 1.1.0, and 1.2.0 impacted by Path Traversal, Rate Limiting, and Weak Password Policy vulnerabilities (CWE-22)

Summary IBM Optim Test Data Management versions 1.0.0, 1.1.0, and 1.2.0 are affected by three medium-severity vulnerabilities including File Path Traversal, Abuse of Functionality with No Rate Limiting, and Weak Password Policy. IBM Optim Test Data Management 2.0.0 resolves these vulnerabilities ...

CVE-2026-54918

NetBox Device Type Library is a community-sourced collection of device type definitions for import into NetBox. In affected revisions, the NETBOX_DT_LIBRARY_URL constant in tests/test_configuration.py is a free-form tracked value that an unauthenticated pull-request author can modify before the C...

CVE-2026-54918 NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. In the affected repository revisions, NETBOXDTLIBRARYURL in tests/testconfiguration.py is a free-form tracked constant that an unauthenticated pull-request author can change before the...

Security Bulletin: InfoSphere Optim Test Data Fabrication is affected by Arbitrary File Read (CVE-2026-3366)

Summary InfoSphere Optim Test Data Fabrication Resource Manager is affected by Arbitrary File Read via Path Traversal CVE-2026-3366. Vulnerability Details CVEID:CVE-2026-3366 DESCRIPTION: IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5...

CVE-2026-3366

IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view...

EUVD-2026-32274

IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view...

CVE-2026-3366

IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view...

CVE-2026-3366

CVE-2026-3366 affects IBM InfoSphere Optim Test Data Fabrication versions 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, and 1.0.2.7. The root cause is a path traversal vulnerability leading to an arbitrary file read when a remote attacker sends a crafted URL contain...

CVE-2026-3366 InfoSphere Optim Test Data Fabrication is affected by Arbitrary File Read

IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view...

CVE-2026-3366 InfoSphere Optim Test Data Fabrication is affected by Arbitrary File Read

IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view...

CVE-2026-3366: Improper Limitation of a Pathname to a Restricted Directory

IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view...

IBM InfoSphere Optim Test Data Fabrication Path Traversal Vulnerability

IBM InfoSphere Optim Test Data Fabrication is a test data generation and management platform developed by the American company International Business Machines IBM. Versions 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, and 1.0.2.7 of this platform have a path...

PT-2026-43698

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Test Data Fabrication versions 1.0.0 through 1.0.0.2 IBM InfoSphere Optim Test Data Fabrication versions 1.0.2 through 1.0.2.7 Description Remote attackers can perform directory traversal on the system by sending a special...

K2view vs Broadcom For Test Data Management

Compare Broadcom TDM and K2view across architecture, integration, masking, and scalability to find the right test data management solution for your needs...

dev.dsf:dsf-fhir-server-jetty (>=1.0.0-m1, <=1.9.0), dev.dsf:dsf-tools-test-data-generator (>=1.0.0-m1, <=1.9.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (>=1.0.0-m1, <=1.9.0)

dev.dsf:dsf-fhir-server MAVEN version =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.9.0 Source cves: CVE-2026-40939 Source advisory: MEND:CVE-2026-40939...

dev.dsf:dsf-fhir-server-jetty (1.9.0), dev.dsf:dsf-tools-test-data-generator (1.9.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (1.9.0)

dev.dsf:dsf-fhir-server MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-fhir-server and may be impacted: - dev.dsf:dsf-fhir-server-jetty 1.9.0 - dev.dsf:dsf-tools-test-data-generator 1.9.0 Source cves: CVE-2026-40939...

dev.dsf:dsf-fhir-server-jetty (1.4.0), dev.dsf:dsf-tools-test-data-generator (1.4.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (1.4.0)

dev.dsf:dsf-fhir-server MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-fhir-server and may be impacted: - dev.dsf:dsf-fhir-server-jetty 1.4.0 - dev.dsf:dsf-tools-test-data-generator 1.4.0 Source cves: CVE-2026-40939...

dev.dsf:dsf-fhir-server-jetty (1.7.1), dev.dsf:dsf-tools-test-data-generator (1.7.1) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (1.7.1)

dev.dsf:dsf-fhir-server MAVEN version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-fhir-server and may be impacted: - dev.dsf:dsf-fhir-server-jetty 1.7.1 - dev.dsf:dsf-tools-test-data-generator 1.7.1 Source cves: CVE-2026-40939...

dev.dsf:dsf-fhir-server-jetty (1.0.0), dev.dsf:dsf-tools-test-data-generator (1.0.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (1.0.0)

dev.dsf:dsf-fhir-server MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-fhir-server and may be impacted: - dev.dsf:dsf-fhir-server-jetty 1.0.0 - dev.dsf:dsf-tools-test-data-generator 1.0.0 Source cves: CVE-2026-40939...