Threat database

CVE-2026-77816 is a vulnerability in IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9. It involves improper certificate validation in the administrative client, which could allow a man-in-the-middle attacker to obtain sensitive information. The vulnerability has a medium severity with a CVSS score of 6.5.

CVE-2026-79715 is a path traversal vulnerability in IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9. It allows a local attacker to use a specially crafted application archive to write files outside the intended directory. This could lead to unauthorized file modification on the system.

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event handlers, and the code executes when another user views the saved prompt. The stored cross-site scripting can alter the interface, present phishing content, observe keystrokes available to the page, and act with the viewer's browser session. This issue is fixed in version 0.3.1.

CVE-2026-53709 is a critical improper authentication vulnerability in IBM mcp-context-forge prior to version 1.0.2. The product shipped with a known JWT secret key, allowing remote unauthenticated attackers to forge administrator tokens. This flaw enables attackers to maintain administrative access despite password changes, account deletions, or session revocations, leading to potential disclosure, modification, and disruption of the service. The issue is fixed in version 1.0.2.

IBM WebSphere Application Server versions 8.5 and 9.0 contain an authentication bypass vulnerability in the CSIv2 inbound propagation handler. This flaw allows a remote attacker to bypass authentication mechanisms, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The vulnerability is identified as CWE-287 (Improper Authentication) and has a high severity with a CVSS score of 8.1.

CVE-2026-95680 is a high-severity vulnerability in IBM WebSphere Application Server versions 8.5 and 9.0. It involves improper authentication (CWE-287) that could allow an authenticated attacker to bypass authorization controls, potentially leading to administrative impersonation across the server cell. This could result in full compromise of administrative functions. The vulnerability has a CVSS 3.1 score of 8.0, indicating a significant risk. No vendor patch or remediation details are provided in the available data.

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction.

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control.

IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

IBM Planning Analytics versions 2.0 and 2.1 contain an authentication bypass vulnerability that could allow a remote attacker with limited privileges to gain unauthorized administrative access. This issue arises from improper authentication handling, classified under CWE-288. The vulnerability has a high severity score of 8.8 and impacts confidentiality, integrity, and availability.

IBM Planning Analytics versions 2.0 and 2.1 contain an authentication bypass vulnerability due to improper validation of sub-requests. This flaw could allow a remote attacker with some privileges to bypass authentication controls and escalate their privileges. The vulnerability is classified under CWE-288 and has a high severity rating with a CVSS score of 8.8.

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding.