Security Bulletin:Vulnerability in decode-uri affects IBM Netezza Appliance

Summary The decode-uri package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-45822 Vulnerability Details CVEID:CVE-2026-45822 DESCRIPTION: decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on...

Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition

Summary Multiple vulnerabilities were addressed in IBM Tivoli Network Manager IP Edition 4.2.0.24 IF3 Vulnerability Details CVEID:CVE-2026-15043 DESCRIPTION: DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = and = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQ...

Security Bulletin: Vulnerability in fast-uri affects IBM Netezza Appliance

Summary The fast-uri package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-6321 Vulnerability Details CVEID:CVE-2026-6321 DESCRIPTION: fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its...

Security Bulletin: Security vulnerability has been found in IBM Verify Identity Access Digital Credentials (CVE-2026-16221)

Summary Security vulnerability has been addressed in IBM Verify Identity Access Digital Credentials Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal...

Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench

Summary Multiple vulnerabilities were addressed in IBM DevOps Solution Workbench version 5.2.1 Vulnerability Details CVEID:CVE-2026-41850 DESCRIPTION: Applications that evaluate user-supplied Spring Expression Language SpEL expressions are vulnerable to an Algorithmic Denial of Service DoS. By...

Security Bulletin: Vulnerability in netty affects IBM Netezza Appliance

Summary The netty package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-42579, CVE-2026-42578 Vulnerability Details CVEID:CVE-2026-42579 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final an...

Security Bulletin: Vulnerabilities exists in IBM Netezza Software

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-43869 DESCRIPTION: Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users ar...

Security Bulletin: Vulnerabilities exists in IBM Netezza Software

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-21933 DESCRIPTION: Java SE could allow a remote attacker to bypass security controls and perform unauthorized update, insert, delete, or read operations on...

Security Bulletin:Incorrect Authorization Vulnerability: Unauthenticated Access to CGI Scripts Protected by Directory Rules via script_alias in Erlang OTP (inets modules)

Summary Incorrect Authorization vulnerability in Erlang OTP inets modules allows unauthenticated access to CGI scripts protected by directory rules when served via scriptalias. When scriptalias maps a URL prefix to a directory outside DocumentRoot, modauth evaluates directory-based access control...

Security Bulletin: IBM i is Affected By An Improper Management Vulnerability in HTTP Server [CVE-2026-18071]

Summary IBM i is vulnerable to elevated privileges due to improper privilege management CVE-2026-18071 in HTTP Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18071 DESCRIPTION: IBM i could allow a local attacker to gain elevated privileges due to...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in NetServer

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16858, CVE-2026-16867, CVE-2026-16868, CVE-2026-16853, CVE-2026-17226, CVE-2026-16859, CVE-2026-16878, CVE-2026-16861, CVE-2026-17212, CVE-2026-18020, CVE-2026-17649, CVE-2026-16871, CVE-2026-18671, CVE-2026-18680, CVE-2026-17502 in...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17216, CVE-2026-17076, CVE-2026-17077, CVE-2026-17074 in Distributed Relational Database Architecture DRDA / Distributed Data Management DDM as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-172...

Security Bulletin: IBM i is Affected By A Denial of Service Vulnerability in DRDA / DDM [CVE-2026-17078]

Summary IBM i is vulnerable to a denial of service due to resource exhaustion CVE-2026-17078 in Distributed Relational Database Architecture DRDA / Distributed Data Management DDM as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17078 DESCRIPTION: IBM i coul...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17088, CVE-2026-17075, CVE-2026-17071, CVE-2026-17069, CVE-2026-17045, CVE-2026-17043 in Digital Certificate Manager DCM as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17043 DESCRIPTION: IBM ...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)

Summary There are mulitple vulnerabilities in the Apache CXF library that affect IBM WebSphere Application Server and affect WebSphere Application Server Liberty when the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, or xmlWS-4.0 features are enabled. Vulnerability Details CVEID:CVE-2026-57819...

Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs

Summary Multiple vulnerabilities are resolved: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518 Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and...

Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs

Summary Multiple vulnerabilities are resolved: CVE-2026-59888, CVE-2026-59889 Vulnerability Details CVEID:CVE-2026-59888 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Ja...

Security Bulletin: Insufficient Authentication Brute Force Protection on Login Endpoint

Summary A rate limiting capability exists within the product to restrict the number of authentication attempts permitted per IP address per minute against the login endpoint POST /api/v1/login. This control is configurable via the LANGFLOWRATELIMITENABLED environment variable, which defaults to...

Security Bulletin: IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP [CVE-2026-17438]

Summary IBM i is vulnerable to obtaining sensitive information or modifying data due to improper privilege management CVE-2026-17438 in Lightweight Directory Access Protocol LDAP as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17438 DESCRIPTION: IBM i could...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17029, CVE-2026-18511, CVE-2026-18068, CVE-2026-18086 in Java Secure Sockets Extension JSSE as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17029 DESCRIPTION: IBM i could allow a local attacke...

Security Bulletin: IBM i is Affected By A Prvilege Escalation Vulnerability [CVE-2026-18509]

Summary IBM i is vulnerable to privilege escalation CVE-2026-18509 in Navigator and Debug Service as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18509 DESCRIPTION: IBM i could allow a local authenticated attacker to gain privilege escalation via the...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16674, CVE-2026-18101, CVE-2026-18715 in WebSphere Application Server Liberty as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18101 DESCRIPTION: IBM i could allow a local attacker to gain...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol

Summary IBM i is vulnerable to multiple vulnerabilites CVE-2026-18077, CVE-2026-16815, CVE-2026-16692 in Simple Mail Transfer Protocol SMTP as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18077 DESCRIPTION: IBM i could allow a remote attacker to cause a...

Security Bulletin: IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime

Summary IBM i is vunlerable to multiple vulnerabilities CVE-2026-18193, CVE-2026-18249, CVE-2026-17476 in IBM SDK Java Technology Edition and IBM Runtime Environment Java to support the building and running of Java applications as described in the vulnerability details section. Vulnerability...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service

Summary IBM i is vulnerable to mutiple vulnerabilities CVE-2026-16898, CVE-2026-16896 in Network Authentication Service NAS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16898 DESCRIPTION: IBM i could allow a local authenticated attacker to change the...

Security Bulletin: IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution (CVE-2026-13476)

Summary IBM Informix versions 12.10, 14.10 and 15.0 are vulnerable to an unauthenticated Remote Code Execution RCE vulnerability in the IBM Informix Wire Listener. Vulnerability Details CVEID:CVE-2026-13476 DESCRIPTION: IBM Informix could allow an unauthenticated user to execute arbitrary command...

Security Bulletin: IBM Maximo Application Suite uuid-9.0.1.tgz which is vulnerable to CVE-2026-41988.

Summary IBM Maximo Application Suite uses uuid-9.0.1.tgz which is vulnerable to CVE-2026-41988. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-41988 DESCRIPTION: uuid before 14.0.0 can make unexpected writes when external outpu...

Security Bulletin: IBM Maximo Application Suite runtime-7.28.4.tgz which is vulnerable to CVE-2025-27789.

Summary IBM Maximo Application Suite uses runtime-7.28.4.tgz which is vulnerable to CVE-2025-27789. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for writing next generation JavaScript...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a privilege escalation (CVE-2026-18499)

Summary IBM WebSphere Application Server Liberty is affected by a privilege escalation with the collectiveController-1.0 or collectiveMember-1.0 enabled. Vulnerability Details CVEID:CVE-2026-18499 DESCRIPTION: IBM WebSphere Application Server Liberty is vulnerable to a privilege escalation when...

Security Bulletin: IBM® Db2® federated server is affected by vulnerabilities in bcprov-jdk18on-1.82 and bcpkix-jdk18on-1.82.

Summary IBM® Db2® federated server is affected by vulnerabilities in bcprov-jdk18on-1.82 and bcpkix-jdk18on-1.82 Vulnerability Details CVEID:CVE-2026-5588 DESCRIPTION: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all pkix...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by an authenication bypass (CVE-2026-14525)

Summary IBM WebSphere Application Server Liberty is affected by an authenication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. Vulnerability Details CVEID:CVE-2026-14525 DESCRIPTION: IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the...

Security Bulletin: IBM Planning Analytics Local is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by security vulnerabilities. These vulnerabilities have been addressed in IBM Planning Analytics Local v2.0 - IBM Planning Analytics Workspace version 2.1.23. Vulnerability Details CVEID:CVE-2026-47244...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a denial of service (CVE-2026-10571)

Summary IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with the restConnector-2.0 feature enabled. Vulnerability Details CVEID:CVE-2026-10571 DESCRIPTION: IBM WebSphere Application Server Liberty is affected by a denial of service caused by insecure...

Security Bulletin: IBM Maximo Application Suite uses js-yaml-4.1.1.tgz which is vulnerable to CVE-2026-53550.

Summary IBM Maximo Application Suite uses js-yaml-4.1.1.tgz which is vulnerable to CVE-2026-53550. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-53550 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0...

Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs

Summary IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs. This bulletin provides patch information to address the vulnerabilities Vulnerability Details CVEID:CVE-2026-48779 DESCRIPTION: ws is ...

Security Bulletin: IBM i is Affected By An Improper Validation Vulnerability [CVE-2026-17498]

Summary IBM i is vulnerable to overwriting arbitrary files due to improper validation CVE-2026-17498 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17498 DESCRIPTION: IBM i could allow a local attacker to overwrite arbitrary files due to improper validatio...

Security Bulletin: linkify-it-5.0.1.tgz security vulnerability in Content Cortex(CCx) reported for GenAI ICN Plugin

Summary linkify-it-5.0.1.tgz CVE-2026-59887 security vulnerability in Content CortexCCx reported for GenAI ICN Plugin Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by...

Security Bulletin: Eclipse parsson security vulnerability in FileNet Content Manager reported for BAI-EVENTS-JAVA-SDK

Summary Eclipse parsson CVE-2026-9563 security vulnerability in FileNet Content Manager. Affected and vulnerable. Vulnerability Details CVEID:CVE-2026-9563 DESCRIPTION: In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on...

Security Bulletin: Jackson databind security vulnerability in FileNet Content Manager reported for ACCE, GraphQL, External-Share

Summary Jackson databind CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518 security vulnerability in FileNet Content Manager. Affected and vulnerable Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose...

Security Bulletin: Vulnerability in libsolv affects IBM Netezza Appliance

Summary The libsolv package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-48864 Vulnerability Details CVEID:CVE-2026-48864 DESCRIPTION: A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlle...

Security Bulletin: Vulnerabilities exists in IBM Netezza Software

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-47162 DESCRIPTION: Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in...

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.3.1 patch 6 version, which was present in different version from watson.data 2.3.1 to watsonx.dat 2.3.1 Patch 5 Vulnerability Details CVEID:CVE-2026-22741 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to cache...

Security Bulletin: Vulnerability in Glibc affects IBM Netezza Appliance

Summary The Glibc package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-5435 Vulnerability Details CVEID:CVE-2026-5435 DESCRIPTION: The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.2 and newer fail to...

Security Bulletin: Vulnerabilities exists in IBM Netezza Software

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2024-7592 DESCRIPTION: There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that...

Security Bulletin:Vulnerability in crypto affects IBM Netezza Appliance

Summary The crypto package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-27145 Vulnerability Details CVEID:CVE-2026-27145 DESCRIPTION:x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name...

Security Bulletin:Vulnerability in llvm-filesystem affects IBM Netezza Appliance

Summary The llvm-filesystem package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-13573 Vulnerability Details CVEID:CVE-2026-13573 DESCRIPTION: A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function...

Security Bulletin:Vulnerability in OpenSSL affects IBM Netezza Appliance

Summary The OpenSSL package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-42770 Vulnerability Details CVEID:CVE-2026-42770 DESCRIPTION: Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly...

Security Bulletin:Vulnerability in OpenSSL affects IBM Netezza Appliance

Summary The OpenSSL package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-42769 Vulnerability Details CVEID:CVE-2026-42769 DESCRIPTION: Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update...

Security Bulletin:Vulnerability in Log4j affects IBM Netezza Appliance

Summary The Log4j package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-49844 Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API...

Security Bulletin:Vulnerability in jackson-databind affects IBM Netezza Appliance

Summary The jackson-databind package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-54515, CVE-2026-59889 Vulnerability Details CVEID:CVE-2026-54515 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and...