Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; never assigned.

Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.

Cross-Cluster Impersonation Confused-Deputy Privilege Escalation

A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user global role can gain full administrative access to the Rancher control plane and transitively to all downstream clusters it manages. This issue affects Rancher: from 2.11.0 before 2.11.16, from 2.12.0 before 2.12.12, from 2.13.0 before 2.13.8, and from 2.14.0 before 2.14.2.

Long-lived Rancher registration token exposed in plaintext

Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster. These tokens were stored and exposed in plaintext with no expiration, so a malicious user could obtain one either through the Rancher API, etcd, stored automation, or direct file access on a node, and could use it at any time to register a rogue node into the cluster.

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Memory Corruption when processing registry values with incorrect types using a direct query method.

Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.