{"id":"EUVD-2026-38300","enisaUuid":"4395388c-b704-39f8-a81a-c84590b99ccd","description":"http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0, http-proxy-middleware documents router proxy-table entries as host, path, or host+path selectors, but the host+path implementation uses unanchored substring matching on attacker-controlled request metadata. As a result, a crafted Host header that is only a superstring match for a configured host+path key can still route a request to an unintended backend. This vulnerability is fixed in 2.0.10, 3.0.6, and 4.1.0.","datePublished":"Jun 22, 2026, 3:58:08 PM","dateUpdated":"Jun 23, 2026, 2:18:06 PM","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/chimurai/http-proxy-middleware/security/advisories/GHSA-64mm-vxmg-q3vj\n","aliases":"CVE-2026-55602\nGHSA-64mm-vxmg-q3vj\n","assigner":"GitHub_M","epss":0.38,"enisaIdProduct":[{"id":"3c9d00bc-0289-3000-b42b-fcaa7364ebc1","product":{"name":"http-proxy-middleware","vendor":{"name":"chimurai"}},"product_version":"3.0.0, \u003c 3.0.6"},{"id":"931d0f26-6079-3b97-97dd-da4d3939ea01","product":{"name":"http-proxy-middleware","vendor":{"name":"chimurai"}},"product_version":"0.16.0, \u003c 2.0.10"},{"id":"b8c4972a-07a7-3f99-a0f8-3b96cfa6f4b4","product":{"name":"http-proxy-middleware","vendor":{"name":"chimurai"}},"product_version":"4.0.0, \u003c 4.1.0"}],"enisaIdVendor":[{"id":"c55f4f5f-3b5d-30ef-be45-d68ab2c3009a","vendor":{"name":"chimurai"}}],"enisaIdVulnerability":[{"id":"6d41e2ea-62f9-3456-99d9-1c917c19f1bc","vulnerability":{"id":"CVE-2026-55602","description":"http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0, http-proxy-middleware documents router proxy-table entries as host, path, or host+path selectors, but the host+path implementation uses unanchored substring matching on attacker-controlled request metadata. As a result, a crafted Host header that is only a superstring match for a configured host+path key can still route a request to an unintended backend. This vulnerability is fixed in 2.0.10, 3.0.6, and 4.1.0.","datePublished":"Jun 22, 2026, 3:58:08 PM","dateUpdated":"Jun 23, 2026, 2:18:06 PM","status":"PUBLISHED","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/chimurai/http-proxy-middleware/security/advisories/GHSA-64mm-vxmg-q3vj\n","enisa_id":"EUVD-2026-38300\n","assigner":"GitHub_M","epss":0.38,"dataProcessed":"Nov 3, 2026, 7:16:19 AM","vulnerabilityProduct":[{"id":"15eaa34d-61c5-3c42-aca3-4894b4539178","product":{"name":"http-proxy-middleware","vendor":{"name":"chimurai"}},"product_version":"3.0.0, \u003c 3.0.6"},{"id":"64b1f266-2da5-37ee-a522-7b4ae2a04f7e","product":{"name":"http-proxy-middleware","vendor":{"name":"chimurai"}},"product_version":"4.0.0, \u003c 4.1.0"},{"id":"7adca016-97d2-3979-b562-17c2a816aa71","product":{"name":"http-proxy-middleware","vendor":{"name":"chimurai"}},"product_version":"0.16.0, \u003c 2.0.10"}],"vulnerabilityVendor":[{"id":"f91d33b4-c3c4-3469-995d-0d33e5b2c1fa","vendor":{"name":"chimurai"}}]}},{"id":"a1624b55-bd24-32ef-a78b-c0a3bda53d4a","vulnerability":{"id":"GHSA-64mm-vxmg-q3vj","description":"http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass","datePublished":"Jun 18, 2026, 1:06:11 PM","dateUpdated":"Jun 22, 2026, 3:59:21 PM","baseScore":0.0,"references":"https://github.com/chimurai/http-proxy-middleware/security/advisories/GHSA-64mm-vxmg-q3vj\nhttps://github.com/chimurai/http-proxy-middleware\n","enisa_id":"EUVD-2026-38300\n","aliases":"CVE-2026-55602\nGHSA-64mm-vxmg-q3vj\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"2cf4cff4-bd52-3348-a9a2-50a4d730c479","advisory":{"id":"openSUSE-SU-2026:12070-1","description":"velociraptor-0.76.7.0.git145.b60ef1146-1.1 on GA media","summary":"velociraptor-0.76.7.0.git145.b60ef1146-1.1 on GA media","datePublished":"Oct 6, 2026, 12:00:00 AM","dateUpdated":"Oct 7, 2026, 8:42:32 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12070-1.json\nhttps://www.suse.com/security/cve/CVE-2025-0914/\nhttps://www.suse.com/security/cve/CVE-2026-12143/\nhttps://www.suse.com/security/cve/CVE-2026-14257/\nhttps://www.suse.com/security/cve/CVE-2026-17535/\nhttps://www.suse.com/security/cve/CVE-2026-18348/\nhttps://www.suse.com/security/cve/CVE-2026-18636/\nhttps://www.suse.com/security/cve/CVE-2026-18638/\nhttps://www.suse.com/security/cve/CVE-2026-18639/\nhttps://www.suse.com/security/cve/CVE-2026-18860/\nhttps://www.suse.com/security/cve/CVE-2026-27601/\nhttps://www.suse.com/security/cve/CVE-2026-29074/\nhttps://www.suse.com/security/cve/CVE-2026-41650/\nhttps://www.suse.com/security/cve/CVE-2026-45623/\nhttps://www.suse.com/security/cve/CVE-2026-49356/\nhttps://www.suse.com/security/cve/CVE-2026-5329/\nhttps://www.suse.com/security/cve/CVE-2026-53550/\nhttps://www.suse.com/security/cve/CVE-2026-55602/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-59869/\nhttps://www.suse.com/security/cve/CVE-2026-6290/\nhttps://www.suse.com/security/cve/CVE-2026-64951/\nhttps://www.suse.com/security/cve/CVE-2026-64952/\nhttps://www.suse.com/security/cve/CVE-2026-64954/\nhttps://www.suse.com/security/cve/CVE-2026-65903/\nhttps://www.suse.com/security/cve/CVE-2026-65912/\nhttps://www.suse.com/security/cve/CVE-2026-65913/\nhttps://www.suse.com/security/cve/CVE-2026-65914/\nhttps://www.suse.com/security/cve/CVE-2026-67314/\nhttps://www.suse.com/security/cve/CVE-2026-67320/\nhttps://www.suse.com/security/cve/CVE-2026-6863/\nhttps://www.suse.com/security/cve/CVE-2026-69152/\nhttps://www.suse.com/security/cve/CVE-2026-69153/\nhttps://www.suse.com/security/cve/CVE-2026-6948/\nhttps://www.suse.com/security/cve/CVE-2026-73086/\nhttps://www.suse.com/security/cve/CVE-2026-73646/\nhttps://www.suse.com/security/cve/CVE-2026-73650/\nhttps://www.suse.com/security/cve/CVE-2026-7572/\nhttps://www.suse.com/security/cve/CVE-2026-7573/\nhttps://www.suse.com/security/cve/CVE-2026-84369/\nhttps://www.suse.com/security/cve/CVE-2026-84370/\n","aliases":"CVE-2025-0914\nCVE-2026-12143\nCVE-2026-14257\nCVE-2026-17535\nCVE-2026-18348\nCVE-2026-18636\nCVE-2026-18638\nCVE-2026-18639\nCVE-2026-18860\nCVE-2026-27601\nCVE-2026-29074\nCVE-2026-41650\nCVE-2026-45623\nCVE-2026-49356\nCVE-2026-5329\nCVE-2026-53550\nCVE-2026-55602\nCVE-2026-56852\nCVE-2026-59869\nCVE-2026-6290\nCVE-2026-64951\nCVE-2026-64952\nCVE-2026-64954\nCVE-2026-65903\nCVE-2026-65912\nCVE-2026-65913\nCVE-2026-65914\nCVE-2026-67314\nCVE-2026-67320\nCVE-2026-6863\nCVE-2026-69152\nCVE-2026-69153\nCVE-2026-6948\nCVE-2026-73086\nCVE-2026-73646\nCVE-2026-73650\nCVE-2026-7572\nCVE-2026-7573\nCVE-2026-84369\nCVE-2026-84370\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"05b56faf-e40a-3609-857d-fad5e693db42","product":{"name":"velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"23f64df1-d714-3f37-856e-9686bd2d5a8e","product":{"name":"velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"46c42df9-32cf-34c3-9ad7-37605a504cb5","product":{"name":"velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"75a0b099-9e17-3479-94ab-60ab3dc7c2b4","product":{"name":"velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"d49e1171-6896-36ad-90d8-9020a283a429","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}}]}},{"id":"64bbe00f-523c-307e-9484-42fc36634505","advisory":{"id":"openSUSE-SU-2026:11680-1","description":"agama-web-ui-24+0.a836cced5-52.1 on GA media","summary":"agama-web-ui-24+0.a836cced5-52.1 on GA media","datePublished":"Sep 4, 2026, 12:00:00 AM","dateUpdated":"Sep 17, 2026, 5:22:46 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11680-1.json\nhttps://www.suse.com/security/cve/CVE-2025-7783/\nhttps://www.suse.com/security/cve/CVE-2026-13149/\nhttps://www.suse.com/security/cve/CVE-2026-13676/\nhttps://www.suse.com/security/cve/CVE-2026-33245/\nhttps://www.suse.com/security/cve/CVE-2026-49356/\nhttps://www.suse.com/security/cve/CVE-2026-53550/\nhttps://www.suse.com/security/cve/CVE-2026-53632/\nhttps://www.suse.com/security/cve/CVE-2026-54466/\nhttps://www.suse.com/security/cve/CVE-2026-55602/\nhttps://www.suse.com/security/cve/CVE-2026-67313/\nhttps://www.suse.com/security/cve/CVE-2026-67315/\nhttps://www.suse.com/security/cve/CVE-2026-67317/\nhttps://www.suse.com/security/cve/CVE-2026-67319/\nhttps://www.suse.com/security/cve/CVE-2026-67321/\nhttps://www.suse.com/security/cve/CVE-2026-69153/\nhttps://www.suse.com/security/cve/CVE-2026-73086/\nhttps://www.suse.com/security/cve/CVE-2026-73088/\nhttps://www.suse.com/security/cve/CVE-2026-73089/\nhttps://www.suse.com/security/cve/CVE-2026-73650/\n","aliases":"CVE-2025-7783\nCVE-2026-13149\nCVE-2026-13676\nCVE-2026-33245\nCVE-2026-49356\nCVE-2026-53550\nCVE-2026-53632\nCVE-2026-54466\nCVE-2026-55602\nCVE-2026-67313\nCVE-2026-67315\nCVE-2026-67317\nCVE-2026-67319\nCVE-2026-67321\nCVE-2026-69153\nCVE-2026-73086\nCVE-2026-73088\nCVE-2026-73089\nCVE-2026-73650\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"1a1b94e3-3502-3ffa-9917-4559d2ca4890","product":{"name":"agama-web-ui-0:24+0.a836cced5-52.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"c0933d18-3b2b-3ea2-8d08-4813dca2cd12","product":{"name":"agama-web-ui-0:24+0.a836cced5-52.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d07d6abb-d6a0-3d6d-8778-306fabdb4c27","product":{"name":"agama-web-ui-0:24+0.a836cced5-52.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"d14ba688-78f1-3da4-9510-b52d412fc410","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"f8f011e3-ed72-365b-9e68-2a9ed3efeeea","product":{"name":"agama-web-ui-0:24+0.a836cced5-52.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"84a36ec0-270d-383a-be67-d75fd5fdcb25","advisory":{"id":"NCSC-2026-0431","description":"Kwetsbaarheden verholpen in IBM DataPower Gateway en onderliggende componenten","datePublished":"Oct 16, 2026, 6:16:13 AM","dateUpdated":"Oct 16, 2026, 6:16:13 AM","baseScore":0.0,"references":"","aliases":"CVE-2023-53781\nCVE-2025-14087\nCVE-2025-14512\nCVE-2025-21858\nCVE-2025-22105\nCVE-2025-37980\nCVE-2025-38015\nCVE-2025-38097\nCVE-2025-38180\nCVE-2025-38400\nCVE-2025-38405\nCVE-2025-38441\nCVE-2025-38470\nCVE-2025-38653\nCVE-2025-39766\nCVE-2025-39797\nCVE-2025-39866\nCVE-2025-40134\nCVE-2025-48431\nCVE-2025-5278\nCVE-2025-68183\nCVE-2025-68211\nCVE-2025-68214\nCVE-2025-68347\nCVE-2025-68366\nCVE-2025-68724\nCVE-2025-71066\nCVE-2025-71089\nCVE-2026-12143\nCVE-2026-13257\nCVE-2026-13258\nCVE-2026-13757\nCVE-2026-14269\nCVE-2026-14273\nCVE-2026-14496\nCVE-2026-14497\nCVE-2026-14502\nCVE-2026-14507\nCVE-2026-14508\nCVE-2026-14509\nCVE-2026-14888\nCVE-2026-14905\nCVE-2026-14988\nCVE-2026-14990\nCVE-2026-14991\nCVE-2026-14992\nCVE-2026-14999\nCVE-2026-15588\nCVE-2026-15762\nCVE-2026-15781\nCVE-2026-15784\nCVE-2026-15819\nCVE-2026-15822\nCVE-2026-15824\nCVE-2026-16111\nCVE-2026-16159\nCVE-2026-16161\nCVE-2026-16163\nCVE-2026-16164\nCVE-2026-16165\nCVE-2026-16167\nCVE-2026-16169\nCVE-2026-16170\nCVE-2026-16176\nCVE-2026-16177\nCVE-2026-16178\nCVE-2026-16179\nCVE-2026-16181\nCVE-2026-16182\nCVE-2026-16340\nCVE-2026-16439\nCVE-2026-16440\nCVE-2026-16441\nCVE-2026-2100\nCVE-2026-22979\nCVE-2026-22984\nCVE-2026-22990\nCVE-2026-23002\nCVE-2026-23060\nCVE-2026-23110\nCVE-2026-23204\nCVE-2026-23209\nCVE-2026-23216\nCVE-2026-23243\nCVE-2026-23270\nCVE-2026-23392\nCVE-2026-23455\nCVE-2026-2391\nCVE-2026-31411\nCVE-2026-31419\nCVE-2026-31488\nCVE-2026-31508\nCVE-2026-31532\nCVE-2026-31581\nCVE-2026-31607\nCVE-2026-31613\nCVE-2026-31669\nCVE-2026-31677\nCVE-2026-31684\nCVE-2026-31685\nCVE-2026-33845\nCVE-2026-33846\nCVE-2026-3832\nCVE-2026-3833\nCVE-2026-4046\nCVE-2026-41254\nCVE-2026-41602\nCVE-2026-41606\nCVE-2026-41607\nCVE-2026-42009\nCVE-2026-42010\nCVE-2026-42011\nCVE-2026-42012\nCVE-2026-42013\nCVE-2026-42014\nCVE-2026-42015\nCVE-2026-43027\nCVE-2026-43037\nCVE-2026-43038\nCVE-2026-43056\nCVE-2026-43074\nCVE-2026-43116\nCVE-2026-43125\nCVE-2026-43163\nCVE-2026-43190\nCVE-2026-43198\nCVE-2026-43260\nCVE-2026-43284\nCVE-2026-43303\nCVE-2026-43329\nCVE-2026-43499\nCVE-2026-43501\nCVE-2026-43868\nCVE-2026-43870\nCVE-2026-4437\nCVE-2026-4438\nCVE-2026-45852\nCVE-2026-46054\nCVE-2026-46086\nCVE-2026-46116\nCVE-2026-46173\nCVE-2026-46181\nCVE-2026-46242\nCVE-2026-46259\nCVE-2026-46300\nCVE-2026-46331\nCVE-2026-46333\nCVE-2026-46917\nCVE-2026-46968\nCVE-2026-47010\nCVE-2026-47021\nCVE-2026-47027\nCVE-2026-47059\nCVE-2026-47063\nCVE-2026-48144\nCVE-2026-48145\nCVE-2026-5260\nCVE-2026-52923\nCVE-2026-52991\nCVE-2026-53006\nCVE-2026-53009\nCVE-2026-53131\nCVE-2026-53189\nCVE-2026-53264\nCVE-2026-53266\nCVE-2026-5419\nCVE-2026-5450\nCVE-2026-55602\nCVE-2026-55603\nCVE-2026-55968\nCVE-2026-55970\nCVE-2026-58010\nCVE-2026-58011\nCVE-2026-58012\nCVE-2026-58013\nCVE-2026-58014\nCVE-2026-58015\nCVE-2026-58016\nCVE-2026-58662\nCVE-2026-59879\nCVE-2026-59880\nCVE-2026-60147\nCVE-2026-60589\nCVE-2026-61308\nCVE-2026-63913\nCVE-2026-63952\nCVE-2026-64017\nCVE-2026-64530\nCVE-2026-64560\nCVE-2026-70906\nCVE-2026-70907\nCVE-2026-74581\nCVE-2026-82417\nCVE-2026-82562\nCVE-2026-83605\nCVE-2026-83607\nCVE-2026-83608\nCVE-2026-83613\nCVE-2026-83614\nCVE-2026-83615\nCVE-2026-83616\nCVE-2026-83619\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"19c5ee39-359c-33c2-b8e0-5b394f0e00a6","product":{"name":"DataPower Gateway 10.5.0","vendor":{"name":"IBM"}}},{"id":"4e15d7b1-11ca-3801-a88d-5758d5e86cbb","product":{"name":"DataPower Gateway","vendor":{"name":"IBM"}}},{"id":"8b3d501c-9655-36b9-878b-0ec9062258ad","product":{"name":"DataPower Gateway 10.6.0","vendor":{"name":"IBM"}}},{"id":"93894416-810e-330b-a54c-f475b4347d3f","product":{"name":"DataPower Gateway 10.6CD","vendor":{"name":"IBM"}}},{"id":"a57c4a82-e533-34af-afe4-24a6da4b361c","product":{"name":"DataPower Gateway 11.0.0","vendor":{"name":"IBM"}}}]}},{"id":"8a8d9464-1ea2-3f13-b5f2-fc19b89aac1b","advisory":{"id":"WID-SEC-W-2026-3623","description":"IBM DataPower Gateway: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in IBM DataPower Gateway ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen, einen Denial-of-Service-Zustand auszulösen oder Cross-Site-Scripting-Angriffe durchzuführen.","datePublished":"Sep 28, 2026, 10:00:00 PM","dateUpdated":"Oct 8, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-3623\n","aliases":"CVE-2023-53781\nCVE-2025-14087\nCVE-2025-14512\nCVE-2025-21858\nCVE-2025-22105\nCVE-2025-37980\nCVE-2025-38015\nCVE-2025-38097\nCVE-2025-38180\nCVE-2025-38400\nCVE-2025-38405\nCVE-2025-38441\nCVE-2025-38470\nCVE-2025-38653\nCVE-2025-39766\nCVE-2025-39797\nCVE-2025-39866\nCVE-2025-40134\nCVE-2025-48431\nCVE-2025-5278\nCVE-2025-68183\nCVE-2025-68211\nCVE-2025-68214\nCVE-2025-68347\nCVE-2025-68366\nCVE-2025-68724\nCVE-2025-71066\nCVE-2025-71089\nCVE-2026-12143\nCVE-2026-13257\nCVE-2026-13258\nCVE-2026-13757\nCVE-2026-14269\nCVE-2026-14273\nCVE-2026-14496\nCVE-2026-14497\nCVE-2026-14502\nCVE-2026-14507\nCVE-2026-14508\nCVE-2026-14509\nCVE-2026-14888\nCVE-2026-14905\nCVE-2026-14988\nCVE-2026-14990\nCVE-2026-14991\nCVE-2026-14992\nCVE-2026-14999\nCVE-2026-15588\nCVE-2026-15762\nCVE-2026-15781\nCVE-2026-15784\nCVE-2026-15819\nCVE-2026-15822\nCVE-2026-15824\nCVE-2026-16111\nCVE-2026-16159\nCVE-2026-16161\nCVE-2026-16163\nCVE-2026-16164\nCVE-2026-16165\nCVE-2026-16167\nCVE-2026-16169\nCVE-2026-16170\nCVE-2026-16176\nCVE-2026-16177\nCVE-2026-16178\nCVE-2026-16179\nCVE-2026-16181\nCVE-2026-16182\nCVE-2026-16340\nCVE-2026-16439\nCVE-2026-16440\nCVE-2026-16441\nCVE-2026-2100\nCVE-2026-22979\nCVE-2026-22984\nCVE-2026-22990\nCVE-2026-23002\nCVE-2026-23060\nCVE-2026-23110\nCVE-2026-23204\nCVE-2026-23209\nCVE-2026-23216\nCVE-2026-23243\nCVE-2026-23270\nCVE-2026-23392\nCVE-2026-23455\nCVE-2026-2391\nCVE-2026-31411\nCVE-2026-31419\nCVE-2026-31488\nCVE-2026-31508\nCVE-2026-31532\nCVE-2026-31581\nCVE-2026-31607\nCVE-2026-31613\nCVE-2026-31669\nCVE-2026-31677\nCVE-2026-31684\nCVE-2026-31685\nCVE-2026-33845\nCVE-2026-33846\nCVE-2026-3832\nCVE-2026-3833\nCVE-2026-4046\nCVE-2026-41254\nCVE-2026-41602\nCVE-2026-41606\nCVE-2026-41607\nCVE-2026-42009\nCVE-2026-42010\nCVE-2026-42011\nCVE-2026-42012\nCVE-2026-42013\nCVE-2026-42014\nCVE-2026-42015\nCVE-2026-43027\nCVE-2026-43037\nCVE-2026-43038\nCVE-2026-43056\nCVE-2026-43074\nCVE-2026-43116\nCVE-2026-43125\nCVE-2026-43163\nCVE-2026-43190\nCVE-2026-43198\nCVE-2026-43260\nCVE-2026-43284\nCVE-2026-43303\nCVE-2026-43329\nCVE-2026-43499\nCVE-2026-43501\nCVE-2026-43868\nCVE-2026-43870\nCVE-2026-4437\nCVE-2026-4438\nCVE-2026-45852\nCVE-2026-46054\nCVE-2026-46086\nCVE-2026-46116\nCVE-2026-46173\nCVE-2026-46181\nCVE-2026-46242\nCVE-2026-46259\nCVE-2026-46300\nCVE-2026-46331\nCVE-2026-46333\nCVE-2026-46917\nCVE-2026-46968\nCVE-2026-47010\nCVE-2026-47021\nCVE-2026-47027\nCVE-2026-47059\nCVE-2026-47063\nCVE-2026-48144\nCVE-2026-48145\nCVE-2026-5260\nCVE-2026-52923\nCVE-2026-52991\nCVE-2026-53006\nCVE-2026-53009\nCVE-2026-53131\nCVE-2026-53189\nCVE-2026-53264\nCVE-2026-53266\nCVE-2026-5419\nCVE-2026-5450\nCVE-2026-55602\nCVE-2026-55603\nCVE-2026-55968\nCVE-2026-55970\nCVE-2026-58010\nCVE-2026-58011\nCVE-2026-58012\nCVE-2026-58013\nCVE-2026-58014\nCVE-2026-58015\nCVE-2026-58016\nCVE-2026-58662\nCVE-2026-59879\nCVE-2026-59880\nCVE-2026-60147\nCVE-2026-60589\nCVE-2026-61308\nCVE-2026-63913\nCVE-2026-63952\nCVE-2026-64017\nCVE-2026-64530\nCVE-2026-64560\nCVE-2026-70906\nCVE-2026-70907\nCVE-2026-74581\nCVE-2026-82417\nCVE-2026-82562\nCVE-2026-83605\nCVE-2026-83607\nCVE-2026-83608\nCVE-2026-83613\nCVE-2026-83614\nCVE-2026-83615\nCVE-2026-83616\nCVE-2026-83619\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"4f51b592-c737-351a-8744-f31e2e3ab145","product":{"name":"DataPower Gateway","vendor":{"name":"IBM"}}},{"id":"abd32b5f-76da-3819-864b-586a12ed6650","product":{"name":"10.5.0.23","vendor":{"name":"IBM"}}},{"id":"de564b51-b49e-3b66-9cc7-d9a0a5eef659","product":{"name":"11.0.0.3","vendor":{"name":"IBM"}}},{"id":"ed864776-3ad1-3c1c-8987-f3d168573d4c","product":{"name":"10.6.0.11","vendor":{"name":"IBM"}}}]}},{"id":"e2ac82bf-70d1-31f0-86de-465461d9c639","advisory":{"id":"openSUSE-SU-2026:21448-1","description":"Security update for agama-web-ui","summary":"Security update for agama-web-ui","datePublished":"Jul 27, 2026, 3:55:38 PM","dateUpdated":"Sep 17, 2026, 5:40:19 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21448-1.json\nhttps://bugzilla.suse.com/1246822\nhttps://bugzilla.suse.com/1259169\nhttps://bugzilla.suse.com/1268851\nhttps://bugzilla.suse.com/1269359\nhttps://bugzilla.suse.com/1269514\nhttps://bugzilla.suse.com/1269595\nhttps://bugzilla.suse.com/1269927\nhttps://bugzilla.suse.com/1272310\nhttps://bugzilla.suse.com/1272311\nhttps://bugzilla.suse.com/1272312\nhttps://bugzilla.suse.com/1272313\nhttps://bugzilla.suse.com/1272317\nhttps://bugzilla.suse.com/1272318\nhttps://bugzilla.suse.com/1272319\nhttps://www.suse.com/security/cve/CVE-2025-7783/\nhttps://www.suse.com/security/cve/CVE-2026-12143/\nhttps://www.suse.com/security/cve/CVE-2026-13149/\nhttps://www.suse.com/security/cve/CVE-2026-13311/\nhttps://www.suse.com/security/cve/CVE-2026-13676/\nhttps://www.suse.com/security/cve/CVE-2026-27601/\nhttps://www.suse.com/security/cve/CVE-2026-40181/\nhttps://www.suse.com/security/cve/CVE-2026-49356/\nhttps://www.suse.com/security/cve/CVE-2026-53550/\nhttps://www.suse.com/security/cve/CVE-2026-53632/\nhttps://www.suse.com/security/cve/CVE-2026-54466/\nhttps://www.suse.com/security/cve/CVE-2026-54490/\nhttps://www.suse.com/security/cve/CVE-2026-55602/\n","aliases":"CVE-2025-7783\nCVE-2026-12143\nCVE-2026-13149\nCVE-2026-13311\nCVE-2026-13676\nCVE-2026-27601\nCVE-2026-40181\nCVE-2026-49356\nCVE-2026-53550\nCVE-2026-53632\nCVE-2026-54466\nCVE-2026-54490\nCVE-2026-55602\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"654d6a0e-5696-38fa-a71d-90b5a932bf12","product":{"name":"agama-web-ui-0:17+673.b97ba64d6-160000.12.1.noarch","vendor":{"name":"SUSE"}}},{"id":"f12ffb2b-b4cc-3752-a69d-544a1498e687","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}}]}}]}