Watson

Watson Watson is a .NET tool designed to enumerate missing KBs and suggest exploits for Privilege Escalation vulnerabilities. Supported Versions Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Server 2016 & 2019 Usage C:\ Watson.exe / / /\ \ \ | | \ / / / | / |/ | ' \ \ /...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in pip (CVE-2026-8643)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in pip due to a flaw where pip treats consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory. Pip is used in our Speech Service Runtimes...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in Hugging Face Transformers (CVE-2026-75104)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in Hugging Face Transformers. Under certain conditions, an attacker could exploit this vulnerability to access files outside the intended model directory. Hugging Face Transformers is used in our Speech Service Runtime...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a memory corruption in LatencyUtils (CVE-2026-82596)

Summary IBM Watson Speech Services Cartridge is vulnerable to a memory corruption in LatencyUtils. LatencyUtils is used in our Speech microservices. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-82596 DESCRIPTION: A...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DoS in Spring Framework (CVE-2026-59282)

Summary IBM Watson Speech Services Cartridge is vulnerable to a DOS, due to an Uncontrolled Resource Consumption in Spring Framework. Spring framework is used in our Speech microservices. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Details...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2024-37891...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues. We have performed updates to the Operators used by our Speech Services. The following vulnerabilities have been addressed in this update. Please read the details for remediation below. Vulnerability...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Protection Mechanism Failure in Sudo (CVE-2026-82474)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Protection Mechanism Failure in Sudo due to a failure to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Sudo is used in our Speech Service Runtimes. This vulnerability has been addressed...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Incorrect Calculation of Buffer Size in rsyslog (CVE-2026-78002)

Summary IBM Watson Speech Services Cartridge is vulnerable to Incorrect Calculation of Buffer Size in rsyslog due to a flaw in the RainerScript replace function. Rsyslog is used in our Speech Service Runtimes. This vulnerability has been addressed. Please read the details for remediation below...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in libcurl (CVE-2026-8458, CVE-2026-8927)

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in libcurl, including Exposure of Data Element to Wrong Session and Authentication Bypass by Capture-replay. Libcurl is used in our Speech Service Runtimes. These vulnerabilities have been addressed. Please read the...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in virtualenv

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in virtualenv including OS Command Injection, CRLF Injection, and Download of Code Without Integrity Check. Virtualenv is used in our Speech Service Runtimes. These vulnerabilities have been addressed. Please read the...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in Expat (CVE-2026-66046, CVE-2026-93990)

Summary IBM Watson Speech Services Cartridge is vulnerable to a DOS in Expat caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in libxml2

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in libxml2. Libxml2 is used in our Speech Service Runtimes. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-74860 DESCRIPTION: A flaw was...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Improper Certificate Validation in Netty (CVE-2026-100665)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Improper Certificate Validation in Netty due to an incomplete hostname verification fix in the QUIC certificate verification path when using a plain X509TrustManager. Netty is used in our Speech microservices. This vulnerability has...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Heap-based Buffer Overflow in NLnet Labs Unbound (CVE-2026-81642, CVE-2026-81634, CVE-2026-82717)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Heap-based Buffer Overflow in NLnet Labs Unbound that could result in remote code execution and DOS conditions. NLnet Labs Unbound is used as part of our Speech microservices. These vulnerabilities have been addressed. Please read th...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Netty's HTTP/3 codec

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Netty's HTTP/3 codec. Netty is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-100659 DESCRIPTION:...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumption issues in FasterXML jackson-databind

Summary IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumption issues in FasterXML jackson-databind. FasterXML jackson-databind is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumptions in FasterXML jackson-core (CVE-2026-89407, CVE-2026-89425)

Summary IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumptions which can result in OutOfMemory Errors in FasterXML jackson-core. FasterXML jackson-core is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat WebSocket

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat WebSocket. Apache Tomcat is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-87022...