6984 matches found
Oracle Critical Security Patch Update, September 2026 Review
Oracle released its September edition of Critical Security Patch Update. The update received patches for 673 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including...
CVE-2026-11927
IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services...
CVE-2026-11927
The IBM Security Verify Identity Access reverse proxy is vulnerable to a flaw where parameters can be injected into requests sent to third-party services. This issue is classified under CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') . Th...
CVE-2026-11927 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services...
EUVD-2026-78892
IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services...
CVE-2026-11927 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services...
PT-2026-92145
Name of the Vulnerable Software and Affected Versions IBM Security Verify Identity Access affected versions not specified Description The reverse proxy may allow parameters to be injected in requests sent to third party services. Recommendations At the moment, there is no information about a newe...
CVE-2026-11927: Improper Neutralization of Special Elements in Output Used by a Downstream Component
IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services...
When Apps Outlive Vendors: Security Implications of IoT Abandonware
As the Internet of Things IoT market continues to expand, many companion apps are being published in app stores, raising security concerns for those whose vendors have abandoned support. Even after vendors discontinue support, such applications frequently remain operational on users' mobile...
EUVD-2026-76744
When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly to that interface without applying the gateway's own authentication requirement first. All access control for this administrative interface, which...
CVE-2026-90449 Missing Authentication for Critical Function in Malcolm
When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly to that interface without applying the gateway's own authentication requirement first. All access control for this administrative interface, which...
CVE-2026-90449
CVE-2026-90449 affects a reverse proxy/gateway in an ICS/OT deployment (per the referenced CISA advisory icsa-26-254-01 ). When a particular authentication mode is configured, the reverse proxy forwards requests to a bundled third-party administrative interface without first applying the gateway'...
Security Bulletin: IBM Informix HQ is affected by multiple vulnerabilities in third-party libraries.
Summary Multiple security vulnerabilities in third-party and open-source dependencies affect IBM Informix HQ. These flaws include Denial of Service via memory exhaustion or inefficient regular expressions, host parser interpretation conflicts leading to potential SSRF/redirect bypass, cross-site...
Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.
Summary Multiple vulnerabilities were identified in third-party components used by CICS Transaction Gateway for Multiplatforms, including IBM WebSphere Application Server, IBM WebSphere Application Server Liberty, Apache Tomcat Embed, Logback, Log4j, Jackson Databind, and various operating system...
List of Security Fixes and Improvements in Veeam Plug-in for Microsoft Azure
Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for Microsoft Azure. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases...
CVE-2026-69713
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
EUVD-2026-73603
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
Windows Secure Boot Security Feature Bypass Vulnerability
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing
Online dating app Grindr has opted to pay £26 million $35.1 million to settle a lawsuit in the U.K. over allegations that it shared users' personal information, including their HIV status, with third-parties. Grindr, which is the largest LGBTQ+ dating app, was sued in April 2024, accusing it of...