Security Bulletin:Vulnerability in Spring MVC and WebFlux affects IBM Netezza Appliance

Summary The Spring MVC and WebFlux package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41843 Vulnerability Details CVEID:CVE-2026-41843 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving...

Security Bulletin:Vulnerability in Spring MVC and WebFlux affects IBM Netezza Appliance

Summary The Spring MVC and WebFlux package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41841 Vulnerability Details CVEID:CVE-2026-41841 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when...

Security Bulletin:Vulnerability in netty affects IBM Netezza Appliance

Summary The netty package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-45536 Vulnerability Details CVEID:CVE-2026-45536 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to versions...

Security Bulletin:Vulnerability in Spring WebFlux affects IBM Netezza Appliance

Summary The Spring WebFlux package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41840 Vulnerability Details CVEID:CVE-2026-41840 DESCRIPTION: Spring WebFlux applications are vulnerable to Denial of Service DoS attacks when processing multipart...

Security Bulletin:Vulnerability in gnutls affects IBM Netezza Appliance

Summary The gnutls package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-5419 Vulnerability Details CVEID:CVE-2026-5419 DESCRIPTION: A flaw was found in gnutls. The PKCS7 padding check, performed during decryption, was not constant-time. This...

Security Bulletin:Vulnerability in curl affects IBM Netezza Appliance

Summary The curl package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-10536 Vulnerability Details CVEID:CVE-2026-10536 DESCRIPTION: A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree...

Security Bulletin:Vulnerability in pyasn1 affects IBM Netezza Appliance

Summary The pyasn1 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-59884, CVE-2026-59885, CVE-2026-59886 Vulnerability Details CVEID:CVE-2026-59884 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder...

Security Bulletin:Vulnerability in httpcore5 affects IBM Netezza Appliance

Summary The httpcore5 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-54428 Vulnerability Details CVEID:CVE-2026-54428 DESCRIPTION: Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents...

Security Bulletin: Vulnerability in acl affects IBM Netezza Appliance

Summary The acl package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-54369 Vulnerability Details CVEID:CVE-2026-54369 DESCRIPTION: acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions...

Security Bulletin:Vulnerability in httpcore affects IBM Netezza Appliance

Summary The httpcore package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-54399 Vulnerability Details CVEID:CVE-2026-54399 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core...

Security Bulletin:Vulnerability in logback-core affects IBM Netezza Appliance

Summary The logback-core package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-10532, CVE-2026-9828 Vulnerability Details CVEID:CVE-2026-10532 DESCRIPTION: Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core...

Security Bulletin:Vulnerability in logback-core affects IBM Netezza Appliance

Summary The logback-core package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-9828 Vulnerability Details CVEID:CVE-2026-9828 DESCRIPTION: Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStre...

Security Bulletin:Vulnerability in libcurl affects IBM Netezza Appliance

Summary The libcurl package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-7168 Vulnerability Details CVEID:CVE-2026-7168 DESCRIPTION: Successfully using libcurl to do a transfer over a specific HTTP proxy proxyA with Digest authentication and th...

Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by HTTP request smuggling and a denial of service. This affects IBM WebSphere Application Server Liberty with the servlet-3.0, servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, servlet-6.1,...

Security Bulletin:Vulnerability in libefiboot affects IBM Netezza Appliance

Summary The libefiboot package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-6862 Vulnerability Details CVEID:CVE-2026-6862 DESCRIPTION: A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to...

Security Bulletin: IBM Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a security bypass vulnerability (CVE-2026-5516)

Summary IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability with the appSecurity-3.0, appSecurity-4.0 or appSecurity-5.0 feature enabled. Following IBM Engineering Lifecycle Management products are vulnerable to this attack, it has been addressed in this...

Security Bulletin:Vulnerability in golang affects IBM Netezza Appliance

Summary The golang package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-39824 Vulnerability Details CVEID:CVE-2026-39824 DESCRIPTION: NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the...

Security Bulletin:Vulnerability in paramiko affects IBM Netezza Appliance

Summary The paramiko package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-44405 Vulnerability Details CVEID:CVE-2026-44405 DESCRIPTION: In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm. CWE:CWE-327: Use of a Broken...

Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for IBM Content Collector for SAP Applications

Summary Multiple Vulnerabilities were disclosed as part of the Oracle July 2026 CPU plus four additional vulnerabilities Critical Patch Update.. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overfl...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jackson-core jar (CVE-2026-18401, CVE-2026-68494)

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-18401 and CVE-2026-68494 reported for jackson-core-2.17.1.jar Vulnerability Details CVEID:CVE-2026-18401 DESCRIPTION: The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength...

Security Bulletin: Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem

Summary The voice mode subsystem src/backend/base/langflow/api/v1/voicemode.py contains two critical vulnerabilities that enable cross-tenant API key reuse and billing fraud. The first vulnerability involves a process-global ElevenLabs client singleton that caches the first user's API key and...

Security Bulletin: IBM Db2 Mirror for i is affected by multiple vulnerabilities

Summary The IBM Db2 Mirror for i GUI is affected by multiple vulnerabilities CVE-2026-17186, CVE-2026-17184, CVE-2026-17182, CVE-2026-17181, CVE-2026-16879, CVE-2026-17179, CVE-2026-16915, CVE-2026-17175, CVE-2026-18554, CVE-2026-17079, CVE-2026-16905, CVE-2026-17227, CVE-2026-17209,...

Security Bulletin: IBM i is Affected By A Denial of Service Vulnerability DST/SST [CVE-2026-16887]

Summary IBM i is vulnerable to a denial of service due to an out-of-bounds write CVE-2026-16887 in Dedicated System Tools DST / System Service Tools SST as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16887 DESCRIPTION: IBM i could allow a remote attacker t...

Security Bulletin: IBM Watsonx BI Assistant for CP4D affected by multiple CVEs

Summary Multiple CVE's were addressed in IBM Watsonx BI Assistant for CP4D version 5.4 patch 4 Vulnerability Details CVEID:CVE-2026-44665 DESCRIPTION: fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in attribute values but process entities is not enabled, it...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerability [CVE-2026-16860]

Summary IBM i is vulnerable to a remote code execution vulnerability due to an uncontrolled search path element CVE-2026-16860 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16860 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in SQL

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17111, CVE-2026-17110, CVE-2026-17109, CVE-2026-17420, CVE-2026-17222, CVE-2026-17419, CVE-2026-17418 in SQL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17111 DESCRIPTION: IBM i is...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17083, CVE-2026-16907, CVE-2026-17248, CVE-2026-17271, CVE-2026-17082 in Debug Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17083 DESCRIPTION: IBM i could allow a remote attacker to...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon [CVE-2026-17218]

Summary IBM i is vulnerable to remote code execution due to an out-of-bounds write CVE-2026-17218 in Line Printer Daemon LPD as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17218 DESCRIPTION: IBM i could allow a remote attacker to execute arbitrary code due...

Security Bulletin: IBM i is Affected By a Denial of Service in HTTP Server [CVE-2026-17272]

Summary IBM i is vulnerable to a denial of service from an out-of-bounds write CVE-2026-17272 in HTTP Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17272 DESCRIPTION: IBM i could allow a remote attacker to cause a denial of service due to a buffer...

Security Bulletin: IBM i is Affected By Multiple SQL Vulnerabilities [CVE-2026-16908, CVE-2026-16967]

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16908, CVE-2026-16967 in SQL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16908 DESCRIPTION: IBM i could allow a remote authenticated attacker to gain unauthorized access to arbitrary objec...

Security Bulletin: IBM i is Affected By An Improper Validation Vulnerability in PASE [CVE-2026-16987]

Summary IBM i is vulnerable to elevated privileges due to improper validation CVE-2026-16987 in Portable Application Solutions Environment PASE as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16987 DESCRIPTION: IBM i could allow a local attacker to gain...

Security Bulletin: IBM i is Affected By A Denial of Service Vulnerability [CVE-2026-16931]

Summary IBM i is vulnerable to a denial of service due to improper handling of TCP options CVE-2026-16931 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16931 DESCRIPTION: IBM i could allow a remote attacker to cause a denial of service due to improper...

Security Bulletin: IBM i is Affected By Improper Validation Vulnerability in Line Printer Daemon [CVE-2026-17445]

Summary IBM i is vulnerable to bypassing security restrictions due to improper validation CVE-2026-17445 in Line Printer Daemon LPD as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17445 DESCRIPTION: IBM i could allow a remote authenticated attacker to bypas...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerabilities [CVE-2026-17642, CVE-2026-17417]

Summary IBM i is vulnerable to remote code execution due to improper neutralization of shell metacharacters and special elements CVE-2026-17642, CVE-2026-17417 in Resource Monitoring and Control RMC as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17642...

Security Bulletin: IBM i is Affected By SQL Injection Vulnerability in Db2 Mirror [CVE-2026-16961]

Summary IBM i is vulnerable to Structure Query Language SQL injection as a result of processing specially crafted statements CVE-2026-16961 in Db2 Mirror as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16961 DESCRIPTION: IBM i is vulnerable to SQL injection...

Security Bulletin: IBM i is Affected By An Unauthorized Privileges Vulnerability in SQL [CVE-2026-16722]

Summary IBM i is vulnerable to obtaining unauthorized privleges due to improper privilege management CVE-2026-16722 in SQL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16722 DESCRIPTION: IBM i could allow a remote authenticated attacker to obtain...

Security Bulletin: IBM i is Affected By Out-of-Bounds Read Vulnerability [CVE-2026-16863]

Summary IBM i is vulnerable to obtaining sensitive information due to an out-of-bounds read CVE-2026-16863 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16863 DESCRIPTION: IBM i could allow a remote authenticated attacker to obtain sensitive information d...

Security Bulletin: IBM i is Affected By A Privilege Escalation Vulnerability [CVE-2026-18669]

Summary IBM i is vulnerable to privilege escalation CVE-2026-18669 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18669 DESCRIPTION: IBM i is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engi...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Domain Name System

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16906, CVE-2026-16856 in BIND Domain Name System DNS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16906 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute arbitrary...

Security Bulletin: IBM i is Affected By A Remote Code Execution Vulnerability [CVE-2026-16975]

Summary IBM i is vulnerable to remote code execution due to a heap-based buffer overflow CVE-2026-16975 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16975 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute arbitrary code due to a...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Navigator for i

Summary IBM i is vulnerable to multiple vulnerabillities CVE-2026-16694, CVE-2026-17101, CVE-2026-17099, CVE-2026-16904, CVE-2026-17095, CVE-2026-17094, CVE-2026-17268, CVE-2026-17266, CVE-2026-17276, CVE-2026-18099, CVE-2026-18098, CVE-2026-18235, CVE-2026-18713, CVE-2026-18683, CVE-2026-18250,...

Security Bulletin: IBM Db2 Mirror for i is vulnerable to OS command injection [CVE-2026-16956]

Summary IBM Db2 Mirror for i is vulnerable to OS command injection as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16956 DESCRIPTION: IBM Db2 Mirror for i could allow a remote attacker to execute arbitrary commands due to improper neutralization of special...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.17 Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslash character U+005C ...

Security Bulletin: Vulnerability in PyNaCl bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the PyNaCl library, which is affected by a denial of service vulnerability. CVE-2025-69277. Vulnerability Details CVEID:CVE-2025-69277 DESCRIPTION: libsodium before ad3004e, in atypical use cases involving certain custom...

Security Bulletin: Vulnerability in lodash bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the lodash library, which is affected by multiple vulnerabilities, including prototype pollution vulnerabilities. CVE-2025-13465, CVE-2026-2950. Vulnerability Details CVEID:CVE-2025-13465 DESCRIPTION: Lodash versions 4.0.0...

Security Bulletin: Vulnerability in go-chi/chi bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the go-chi/chi library, which is affected by a denial of service vulnerability. CVE-2025-69725. Vulnerability Details CVEID:CVE-2025-69725 DESCRIPTION: An Open Redirect vulnerability in the go-chi/chi =5.2.2 RedirectSlashe...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service, HTTP Response and Request Smuggling vulnerabilities when servlet-3.0, servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, or servlet-6.1 is enabled. Vulnerability Details...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery (CVE-2026-14529)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery vulnerability when sipServlet-1.1 is enabled. Vulnerability Details CVEID:CVE-2026-14529 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)

Summary IBM WebSphere Application Server Liberty is affected by a cross-site request forgery vulnerability with the collectiveController-1.0 enabled. Vulnerability Details CVEID:CVE-2026-14980 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a denial of service (CVE-2026-16192)

Summary IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with the restConnector-1.0 or restConnector-2.0 enabled. Vulnerability Details CVEID:CVE-2026-16192 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a...