PT-2026-115168

Name of the Vulnerable Software and Affected Versions WildMIDI versions 0.5.0 and earlier Description A heap out-of-bounds read exists in the HMP parser WM ParseNewHmp function. An attacker can provide a specially crafted .hmp file with a chunk length between 0 and 12, causing an underflow that...

PT-2026-115169

Name of the Vulnerable Software and Affected Versions WildMIDI versions 0.5.0 and earlier Description A heap out-of-bounds read occurs in the WM ParseNewHmi function within src/f hmi.c when handling 0xfe sub-events. An attacker can provide a specially crafted HMI file containing a 0xfe 0x10...

com.eurodyn.qlack2.util:qlack2-util-cluster-hazelcast (>=2.2.1, <=2.3.19), com.hazelcast:hazelcast-build-utils (3.4.6) +8 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.4.6)

com.hazelcast:hazelcast MAVEN version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.eurodyn.qlack2.util:qlack2-util-cluster-hazelcast =2.2.1, =2.3.19 - com.hazelcast:hazelcast-build-utils 3.4.6...

com.hazelcast:hazelcast-client (2.6.4), com.hazelcast:hazelcast-cloud (2.6.4) +4 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (2.6.4)

com.hazelcast:hazelcast MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 2.6.4 - com.hazelcast:hazelcast-cloud 2.6.4 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.0-rc2), com.hazelcast:hazelcast-cloud (3.0-rc2) +5 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.0-rc2)

com.hazelcast:hazelcast MAVEN version 3.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.0-rc2 - com.hazelcast:hazelcast-cloud 3.0-rc2 -...

com.hazelcast:hazelcast-all (1.9.1), com.hazelcast:hazelcast-client (1.9.1) +5 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (1.9.1)

com.hazelcast:hazelcast MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.1 - com.hazelcast:hazelcast-client 1.9.1 - com.hazelcast:hazelcast-hibernate 1.9....

com.hazelcast:hazelcast-hibernate (1.7-rc2), com.hazelcast:hazelcast-ra (1.7-rc2) +1 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (1.7-rc2)

com.hazelcast:hazelcast MAVEN version 1.7-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-hibernate 1.7-rc2 - com.hazelcast:hazelcast-ra 1.7-rc2 - com.hazelcast:hazelcast-wm...

com.hazelcast:hazelcast-client (3.4-ea), com.hazelcast:hazelcast-cloud (3.4-ea) +6 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.4-ea)

com.hazelcast:hazelcast MAVEN version 3.4-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.4-ea - com.hazelcast:hazelcast-cloud 3.4-ea - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.0-rc1), com.hazelcast:hazelcast-cloud (3.0-rc1) +5 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.0-rc1)

com.hazelcast:hazelcast MAVEN version 3.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.0-rc1 - com.hazelcast:hazelcast-cloud 3.0-rc1 -...

com.hazelcast:hazelcast-hibernate (1.7), com.hazelcast:hazelcast-ra (1.7) +1 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (1.7)

com.hazelcast:hazelcast MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-hibernate 1.7 - com.hazelcast:hazelcast-ra 1.7 - com.hazelcast:hazelcast-wm 1.7 Source cves...

com.hazelcast:hazelcast-hibernate (1.7-rc4), com.hazelcast:hazelcast-ra (1.7-rc4) +1 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (1.7-rc4)

com.hazelcast:hazelcast MAVEN version 1.7-rc4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-hibernate 1.7-rc4 - com.hazelcast:hazelcast-ra 1.7-rc4 - com.hazelcast:hazelcast-wm...

com.hazelcast:hazelcast-client (1.7.1), com.hazelcast:hazelcast-hibernate (1.7.1) +2 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (1.7.1)

com.hazelcast:hazelcast MAVEN version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 1.7.1 - com.hazelcast:hazelcast-hibernate 1.7.1 - com.hazelcast:hazelcast-ra 1.7.1...

com.hazelcast:hazelcast-client (1.8.2), com.hazelcast:hazelcast-hibernate (1.8.2) +3 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (1.8.2)

com.hazelcast:hazelcast MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 1.8.2 - com.hazelcast:hazelcast-hibernate 1.8.2 - com.hazelcast:hazelcast-monitor...

com.hazelcast:hazelcast-hibernate (1.7), com.hazelcast:hazelcast-ra (1.7) +1 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (1.7)

com.hazelcast:hazelcast MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-hibernate 1.7 - com.hazelcast:hazelcast-ra 1.7 - com.hazelcast:hazelcast-wm 1.7 Source cves...

com.hazelcast:hazelcast-client (3.0-rc1), com.hazelcast:hazelcast-cloud (3.0-rc1) +5 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.0-rc1)

com.hazelcast:hazelcast MAVEN version 3.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.0-rc1 - com.hazelcast:hazelcast-cloud 3.0-rc1 -...

com.hazelcast:hazelcast-client (3.0.2), com.hazelcast:hazelcast-cloud (3.0.2) +7 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.0.2)

com.hazelcast:hazelcast MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.0.2 - com.hazelcast:hazelcast-cloud 3.0.2 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-hibernate (1.7-rc3), com.hazelcast:hazelcast-ra (1.7-rc3) +1 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (1.7-rc3)

com.hazelcast:hazelcast MAVEN version 1.7-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-hibernate 1.7-rc3 - com.hazelcast:hazelcast-ra 1.7-rc3 - com.hazelcast:hazelcast-wm...

com.hazelcast:hazelcast-client (1.8.1), com.hazelcast:hazelcast-hibernate (1.8.1) +3 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (1.8.1)

com.hazelcast:hazelcast MAVEN version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 1.8.1 - com.hazelcast:hazelcast-hibernate 1.8.1 - com.hazelcast:hazelcast-monitor...

com.hazelcast:hazelcast-hibernate (1.7-rc2), com.hazelcast:hazelcast-ra (1.7-rc2) +1 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (1.7-rc2)

com.hazelcast:hazelcast MAVEN version 1.7-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-hibernate 1.7-rc2 - com.hazelcast:hazelcast-ra 1.7-rc2 - com.hazelcast:hazelcast-wm...

com.hazelcast:hazelcast-all (2.0-rc1), com.hazelcast:hazelcast-client (2.0-rc1) +5 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (2.0-rc1)

com.hazelcast:hazelcast MAVEN version 2.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.0-rc1 - com.hazelcast:hazelcast-client 2.0-rc1 - com.hazelcast:hazelcast-cloud...