Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j and Bouncy Castle.

Summary IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j and Bouncy Castle. Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The fix for CVE-2025-68161 https://logging.apache.org/security.htmlCVE-2025-68161 was incomplete: it addressed hostnam...

CVE-2026-34477 vulnerabilities

Vulnerabilities for packages: elasticsearch, apache-tika-fips, ghidra, tritonserver-backend-vllm-cuda-13.0, wavefront-proxy, solr, apache-activemq-fips, elasticsearch-fips, geoserver, airflow, kafka, celeborn, camunda, strimzi-kafka-operator, apache-camel-karavan-devmode, zipkin, camunda-zeebe,...

CVE-2026-34477

creationtimestamp| type| source ---|---|--- 2026-04-10 15:45:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj5o3zfi6q26 2026-05-13 16:36:23+00:00| seen| https://gist.github.com/ppkarwasz/53b0a3c07a9e44aa945726138f67d11c...