Security Bulletin:Vulnerability in pyasn1 affects IBM Netezza Appliance

Summary The pyasn1 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-59884, CVE-2026-59885, CVE-2026-59886 Vulnerability Details CVEID:CVE-2026-59884 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder...

Security Bulletin:Vulnerability in httpcore5 affects IBM Netezza Appliance

Summary The httpcore5 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-54428 Vulnerability Details CVEID:CVE-2026-54428 DESCRIPTION: Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents...

Security Bulletin: Vulnerability in acl affects IBM Netezza Appliance

Summary The acl package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-54369 Vulnerability Details CVEID:CVE-2026-54369 DESCRIPTION: acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions...

Security Bulletin:Vulnerability in httpcore affects IBM Netezza Appliance

Summary The httpcore package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-54399 Vulnerability Details CVEID:CVE-2026-54399 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core...

Security Bulletin:Vulnerability in logback-core affects IBM Netezza Appliance

Summary The logback-core package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-10532, CVE-2026-9828 Vulnerability Details CVEID:CVE-2026-10532 DESCRIPTION: Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core...

Security Bulletin:Vulnerability in logback-core affects IBM Netezza Appliance

Summary The logback-core package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-9828 Vulnerability Details CVEID:CVE-2026-9828 DESCRIPTION: Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStre...

Security Bulletin:Vulnerability in libcurl affects IBM Netezza Appliance

Summary The libcurl package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-7168 Vulnerability Details CVEID:CVE-2026-7168 DESCRIPTION: Successfully using libcurl to do a transfer over a specific HTTP proxy proxyA with Digest authentication and th...

Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by HTTP request smuggling and a denial of service. This affects IBM WebSphere Application Server Liberty with the servlet-3.0, servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, servlet-6.1,...

Security Bulletin:Vulnerability in libefiboot affects IBM Netezza Appliance

Summary The libefiboot package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-6862 Vulnerability Details CVEID:CVE-2026-6862 DESCRIPTION: A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to...

Security Bulletin: IBM Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a security bypass vulnerability (CVE-2026-5516)

Summary IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability with the appSecurity-3.0, appSecurity-4.0 or appSecurity-5.0 feature enabled. Following IBM Engineering Lifecycle Management products are vulnerable to this attack, it has been addressed in this...

Security Bulletin:Vulnerability in golang affects IBM Netezza Appliance

Summary The golang package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-39824 Vulnerability Details CVEID:CVE-2026-39824 DESCRIPTION: NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the...

Security Bulletin:Vulnerability in paramiko affects IBM Netezza Appliance

Summary The paramiko package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-44405 Vulnerability Details CVEID:CVE-2026-44405 DESCRIPTION: In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm. CWE:CWE-327: Use of a Broken...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jackson-core jar (CVE-2026-18401, CVE-2026-68494)

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-18401 and CVE-2026-68494 reported for jackson-core-2.17.1.jar Vulnerability Details CVEID:CVE-2026-18401 DESCRIPTION: The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength...

Security Bulletin: Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem

Summary The voice mode subsystem src/backend/base/langflow/api/v1/voicemode.py contains two critical vulnerabilities that enable cross-tenant API key reuse and billing fraud. The first vulnerability involves a process-global ElevenLabs client singleton that caches the first user's API key and...

Security Bulletin: IBM Db2 Mirror for i is affected by multiple vulnerabilities

Summary The IBM Db2 Mirror for i GUI is affected by multiple vulnerabilities CVE-2026-17186, CVE-2026-17184, CVE-2026-17182, CVE-2026-17181, CVE-2026-16879, CVE-2026-17179, CVE-2026-16915, CVE-2026-17175, CVE-2026-18554, CVE-2026-17079, CVE-2026-16905, CVE-2026-17227, CVE-2026-17209,...

Security Bulletin: IBM i is Affected By A Denial of Service Vulnerability DST/SST [CVE-2026-16887]

Summary IBM i is vulnerable to a denial of service due to an out-of-bounds write CVE-2026-16887 in Dedicated System Tools DST / System Service Tools SST as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16887 DESCRIPTION: IBM i could allow a remote attacker t...

Security Bulletin: IBM Watsonx BI Assistant for CP4D affected by multiple CVEs

Summary Multiple CVE's were addressed in IBM Watsonx BI Assistant for CP4D version 5.4 patch 4 Vulnerability Details CVEID:CVE-2026-44665 DESCRIPTION: fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in attribute values but process entities is not enabled, it...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerability [CVE-2026-16860]

Summary IBM i is vulnerable to a remote code execution vulnerability due to an uncontrolled search path element CVE-2026-16860 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16860 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in SQL

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17111, CVE-2026-17110, CVE-2026-17109, CVE-2026-17420, CVE-2026-17222, CVE-2026-17419, CVE-2026-17418 in SQL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17111 DESCRIPTION: IBM i is...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17083, CVE-2026-16907, CVE-2026-17248, CVE-2026-17271, CVE-2026-17082 in Debug Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17083 DESCRIPTION: IBM i could allow a remote attacker to...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon [CVE-2026-17218]

Summary IBM i is vulnerable to remote code execution due to an out-of-bounds write CVE-2026-17218 in Line Printer Daemon LPD as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17218 DESCRIPTION: IBM i could allow a remote attacker to execute arbitrary code due...

Security Bulletin: IBM i is Affected By Multiple SQL Vulnerabilities [CVE-2026-16908, CVE-2026-16967]

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16908, CVE-2026-16967 in SQL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16908 DESCRIPTION: IBM i could allow a remote authenticated attacker to gain unauthorized access to arbitrary objec...

Security Bulletin: IBM i is Affected By An Improper Validation Vulnerability in PASE [CVE-2026-16987]

Summary IBM i is vulnerable to elevated privileges due to improper validation CVE-2026-16987 in Portable Application Solutions Environment PASE as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16987 DESCRIPTION: IBM i could allow a local attacker to gain...

Security Bulletin: IBM i is Affected By A Denial of Service Vulnerability [CVE-2026-16931]

Summary IBM i is vulnerable to a denial of service due to improper handling of TCP options CVE-2026-16931 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16931 DESCRIPTION: IBM i could allow a remote attacker to cause a denial of service due to improper...

Security Bulletin: IBM i is Affected By Improper Validation Vulnerability in Line Printer Daemon [CVE-2026-17445]

Summary IBM i is vulnerable to bypassing security restrictions due to improper validation CVE-2026-17445 in Line Printer Daemon LPD as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17445 DESCRIPTION: IBM i could allow a remote authenticated attacker to bypas...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerabilities [CVE-2026-17642, CVE-2026-17417]

Summary IBM i is vulnerable to remote code execution due to improper neutralization of shell metacharacters and special elements CVE-2026-17642, CVE-2026-17417 in Resource Monitoring and Control RMC as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17642...

Security Bulletin: IBM i is Affected By SQL Injection Vulnerability in Db2 Mirror [CVE-2026-16961]

Summary IBM i is vulnerable to Structure Query Language SQL injection as a result of processing specially crafted statements CVE-2026-16961 in Db2 Mirror as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16961 DESCRIPTION: IBM i is vulnerable to SQL injection...

Security Bulletin: IBM i is Affected By An Unauthorized Privileges Vulnerability in SQL [CVE-2026-16722]

Summary IBM i is vulnerable to obtaining unauthorized privleges due to improper privilege management CVE-2026-16722 in SQL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16722 DESCRIPTION: IBM i could allow a remote authenticated attacker to obtain...

Security Bulletin: IBM i is Affected By Out-of-Bounds Read Vulnerability [CVE-2026-16863]

Summary IBM i is vulnerable to obtaining sensitive information due to an out-of-bounds read CVE-2026-16863 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16863 DESCRIPTION: IBM i could allow a remote authenticated attacker to obtain sensitive information d...

Security Bulletin: IBM i is Affected By A Privilege Escalation Vulnerability [CVE-2026-18669]

Summary IBM i is vulnerable to privilege escalation CVE-2026-18669 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18669 DESCRIPTION: IBM i is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engi...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Domain Name System

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16906, CVE-2026-16856 in BIND Domain Name System DNS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16906 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute arbitrary...

Security Bulletin: IBM i is Affected By A Remote Code Execution Vulnerability [CVE-2026-16975]

Summary IBM i is vulnerable to remote code execution due to a heap-based buffer overflow CVE-2026-16975 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16975 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute arbitrary code due to a...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Navigator for i

Summary IBM i is vulnerable to multiple vulnerabillities CVE-2026-16694, CVE-2026-17101, CVE-2026-17099, CVE-2026-16904, CVE-2026-17095, CVE-2026-17094, CVE-2026-17268, CVE-2026-17266, CVE-2026-17276, CVE-2026-18099, CVE-2026-18098, CVE-2026-18235, CVE-2026-18713, CVE-2026-18683, CVE-2026-18250,...

Security Bulletin: IBM Db2 Mirror for i is vulnerable to OS command injection [CVE-2026-16956]

Summary IBM Db2 Mirror for i is vulnerable to OS command injection as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16956 DESCRIPTION: IBM Db2 Mirror for i could allow a remote attacker to execute arbitrary commands due to improper neutralization of special...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.17 Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslash character U+005C ...

Security Bulletin: Vulnerability in PyNaCl bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the PyNaCl library, which is affected by a denial of service vulnerability. CVE-2025-69277. Vulnerability Details CVEID:CVE-2025-69277 DESCRIPTION: libsodium before ad3004e, in atypical use cases involving certain custom...

Security Bulletin: Vulnerability in lodash bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the lodash library, which is affected by multiple vulnerabilities, including prototype pollution vulnerabilities. CVE-2025-13465, CVE-2026-2950. Vulnerability Details CVEID:CVE-2025-13465 DESCRIPTION: Lodash versions 4.0.0...

Security Bulletin: Vulnerability in go-chi/chi bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the go-chi/chi library, which is affected by a denial of service vulnerability. CVE-2025-69725. Vulnerability Details CVEID:CVE-2025-69725 DESCRIPTION: An Open Redirect vulnerability in the go-chi/chi =5.2.2 RedirectSlashe...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery (CVE-2026-14529)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery vulnerability when sipServlet-1.1 is enabled. Vulnerability Details CVEID:CVE-2026-14529 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)

Summary IBM WebSphere Application Server Liberty is affected by a cross-site request forgery vulnerability with the collectiveController-1.0 enabled. Vulnerability Details CVEID:CVE-2026-14980 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a denial of service (CVE-2026-16192)

Summary IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with the restConnector-1.0 or restConnector-2.0 enabled. Vulnerability Details CVEID:CVE-2026-16192 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability (CVE-2026-14976, CVE-2026-15280)

Summary IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability with the collectiveController-1.0 enabled. Vulnerability Details CVEID:CVE-2026-15280 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Kerby

Summary Multiple vulnerabilities in Apache Kerby that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-57915 DESCRIPTION: It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Jansi

Summary A vulnerability in Jansi that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2026-8484 DESCRIPTION: A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl" wrapper due to a lack of size verification for the argument array before the...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher

Summary The following vulnerabilities, which can affect IBM Storage Scale and the Management GUI and could provide weaker-than-expected security, are now fixed in Storage Scale 5.2.3.9 or higher and 6.0.1.1 or higher. CVE-2026-19483, CVE-2026-13460 Vulnerability Details CVEID:CVE-2026-19483...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in QOS.CH Sarl logback

Summary Multiple vulnerabilities in QOS.CH Sarl logback that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-9828 DESCRIPTION: Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache SOAP

Summary Multiple vulnerabilities in Apache SOAP that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2022-40705 DESCRIPTION: An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to rea...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Thrift

Summary Multiple vulnerabilities in Apache Thrift that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2018-11798 DESCRIPTION: The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in json

Summary Multiple vulnerabilities in json that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-34610 DESCRIPTION: An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in jline-groovy (CVE-2023-50572)

Summary A vulnerability in jline-groovy that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-50572 DESCRIPTION: An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM OutofMemory error. CWE:CWE-787:...