Security Bulletin: Due to use of IBM WebSphere Application Server and IBM WebSphere Liberty, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Multiple vulnerabilities have been identified in IBM WebSphere Application Server and IBM WebSphere Liberty, supporting product which is shipped as pattern type with IBM Cloud Pak System. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affecte...

CVE-2026-77105

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

CVE-2026-77105 CommServe Privilege Escalation

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

CVE-2026-77105

CommServe (Commvault) contains a cryptographic signature verification flaw in its privilege management functionality, enabling privilege escalation. The vulnerability is reachable over the network with low privileges and no user interaction , rated CVSS 4.0 8.7 (HIGH) with high impact on confiden...

EUVD-2026-72731

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

CVE-2026-62649

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...

CVE-2026-62649

A denial-of-service vulnerability affects the web server in Reyrolle 7SR5 (all versions

EUVD-2026-72664

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...

CVE-2026-62649

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...

CVE-2026-76960 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...

PT-2026-87008

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...

The vulnerability of the SIMATIC S7 PLC web server, related to insecure resource initialization, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the web server in the SIMATIC S7 PLC is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

CVE-2026-86166

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2026-86166 Tenda HG10 Boa Web Server formWanRedirect buffer overflow

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The attack may be launched remotely. The exploit h...

EUVD-2026-72050

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2026-86166

Tenda HG10 (firmware 300001138 ) is affected by a buffer overflow in the Boa Web Server component, specifically in the formWanRedirect() function of the /boaform/formWanRedirect endpoint. A remote, low-privilege attacker can trigger the vulnerability by manipulating the if argument, leading to hi...

CVE-2026-86166 Tenda HG10 Boa Web Server formWanRedirect buffer overflow

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2026-85110

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation of the argument ssid leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly...

CVE-2026-85109

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...

EUVD-2026-70471

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation of the argument ssid leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly...