Security Bulletin: IBM Db2 Bridge is vulnerable due to Jackson-databind ( CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518)

Summary Jackson databind is used as part of IBM Db2 Bridge and it was affected by vulnerabilities described in the vulnerability details. This issue Affected users using Db2 Bridge 1.1.5 and new Fix pack was release to address the issue. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION:...

SUSE SLED15: jackson-annotations / jackson-core / jackson-databind / etc (SUSE-SU-2026:3273-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3273-1 advisory. - CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass of...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: spark-fips, localstack, hono, nacos-docker, airbyte-server-fips, s3proxy, s3proxy-fips, scala, kafbat-ui, infinispan, gradle, apache-tomee, conductor-fips, camunda-zeebe, spark-kubernetes-operator-fips, solr-fips, kafka-fips, management-api-for-apache-cassandra-5.0,...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: airflow, jenkins-plugin-manager, apicurio-registry, celeborn, ruby3.2-jrjackson, strimzi-kafka-operator, scala, kafka, keycloak, dependency-track, apache-tika, logstash, apache-nifi, keycloak-config-cli, ruby4.0-jrjackson, neo4j, jenkins, infinispan, tez,...