EUVD-2026-83136

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2026-1025

IBM Common Licensing (Agent 9.0, 9.0.0.1, 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2) contains a cross-site scripting flaw (CWE-79) in its Web UI. An attacker can embed arbitrary JavaScript code that alters intended functionality, potentially leading to credentials disclosure within a trusted...

CVE-2026-1025 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

EUVD-2026-83135

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2026-1025 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

EUVD-2025-210958

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...

CVE-2025-36147 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting.

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...

CVE-2025-36147 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting.

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...

CLEANSTART-2026-QY34934 Security fix for ghsa-prj3-ccx8-p6x4 applied in: cloudwatch-exporter 0.16.0-r0, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.2.0-r1, kafka-ui 1.3.0-r1, kogito-apps 10.1.0-r0, kserve-modelmesh 0.12.0-r16, stargate 1.0.90-r4, stargate 2.0.44-r4

ghsa-prj3-ccx8-p6x4 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QW90668 Security fix for ghsa-5359-pvf2-pw78 applied in: thingsboard-tb-web-ui 4.3.0.1-r0

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NN34341 Security fix for CVE-2026-26960 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, npm 11.10.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-26960 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV30852 Security fix for CVE-2026-29786 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, renovate 43.4.3-r1, renovate 43.4.4-r0, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-29786 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MZ20029 Security fix for CVE-2026-1225 applied in: cassandra 5.0.6-r2, cassandra 5.0.8-r1, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r2, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9, cassandra-reaper-fips 4.0.1-r1, cassandra-reaper-fips 4.0.2-r1, cassandra-reaper-fips 4.1.1-r1, cloud-config-server 4.3.2-r3, confluent-common-docker 7.6.9-r3, kafka-ui 1.3.0-r2, kafka-ui 1.4.2-r5, kserve-modelmesh 0.10.0-r0, kserve-modelmesh 0.12.0-r0, schema-registry 7.7.8-r1, sonarqube 25.12.0.117093-r2, stargate 1.0.90-r4, stargate 2.0.44-r4, thingsboard 4.3.0.1-r2, thingsboard 4.3.1-r0, trino 479-r0

CVE-2026-1225 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EQ27053 Security fix for CVE-2025-64715 applied in: hubble-ui 0.13.3-r0, hubble-ui-fips 0.13.3-r0

CVE-2025-64715 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZS52141 Security fix for CVE-2026-33726 applied in: hubble-ui 0.13.3-r1, hubble-ui-fips 0.13.3-r1

CVE-2026-33726 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NJ85552 Security fix for ghsa-4q2v-9p7v-3v22 applied in: elasticsearch 9.3.5-r0, kafka-ui 1.2.0-r1, kafka-ui 1.3.0-r1, thingsboard 4.0.2-r0, thingsboard 4.1-r0

ghsa-4q2v-9p7v-3v22 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UT02343 Security fix for ghsa-4wp7-92pw-q264 applied in: kafka-ui 1.2.0-r1, kafka-ui 1.3.0-r1

ghsa-4wp7-92pw-q264 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CC58014 Security fix for ghsa-rc42-6c7j-7h5r applied in: kafka-ui 1.2.0-r1, kafka-ui 1.3.0-r1

ghsa-rc42-6c7j-7h5r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FD72989 Security fix for ghsa-6r3c-xf4w-jxjm applied in: kafka-ui 1.2.0-r1, kafka-ui 1.3.0-r1

ghsa-6r3c-xf4w-jxjm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BH37333 Security fix for ghsa-jmp9-x22r-554x applied in: kafka-ui 1.2.0-r1, kafka-ui 1.3.0-r1

ghsa-jmp9-x22r-554x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...