CVE Notifier

CVE-2026-13277 CWE-601 N/A

Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vuln…

cve.org IBM:Verify · Identity · Access 14 Sep 2026

CVE-2026-53713 CWE-20 9.1

Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, to_absolute_normalized_path in internal/gatewayapi/luavalidator/security…

cve.org envoyproxy:gateway 14 Sep 2026

CVE-2026-53717 CWE-789 6.5

Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPo…

cve.org envoyproxy:gateway 14 Sep 2026

CVE-2026-15396 CWE-444 6.5

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a…

cve.org IBM:WebSphere · Application · Server 14 Sep 2026

CVE-2026-15412 CWE-601 6.5

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a spe…

cve.org IBM:WebSphere · Application · Server 14 Sep 2026

CVE-2026-54559 CWE-119 N/A

PocketSphinx: Buffer overflows in language and acoustic model loading code

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngram_model_trie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acou…

cve.org cmusphinx:pocketsphinx 14 Sep 2026

CVE-2026-54334 CWE-787 9.8

UEFI Firmware Parser: Heap out-of-bounds write in tiano decompressor `ReadCLen`

UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, ReadCLen() in uefi_firmware/compression/Tiano/Decompress.c reads Number from GetBits(Sd,…

cve.org theopolis:uefi-firmware-parser 14 Sep 2026

CVE-2026-54333 CWE-787 9.8

UEFI Firmware Parser: Stack out-of-bounds write in tiano decompressor MakeTable

UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, MakeTable() in uefi_firmware/compression/Tiano/Decompress.c does not validate that bit-l…

cve.org theopolis:uefi-firmware-parser 14 Sep 2026

CVE-2026-19816 CWE-863 7.1

PackageKit: dnf5 backend ignores SIMULATE on RepoRemove

A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE (dry-run) flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes…

cve.org Fedora:Fedora · Red · Hat:Red 14 Sep 2026

CVE-2026-54247 CWE-770 4.3

Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.22, Handler in dataclients/kubernetes/admission/admission.go passes the body of requests to the Kubernetes admission endpoint at :9443/ad…

cve.org zalando:skipper 14 Sep 2026

CVE-2026-54246 CWE-306 5.7

Skipper routesrv-no-auth: All routesrv API Endpoints Lack Authentication

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.13, the routesrv component serves cluster-wide control-plane data without application-layer authentication through /routes, /routes/{zone…

cve.org zalando:skipper 14 Sep 2026

CVE-2026-15634 CWE-444 6.5

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a…

cve.org IBM:WebSphere · Application · Server 14 Sep 2026