{"id":"EUVD-2026-38349","enisaUuid":"96fea14f-369d-311d-80e4-3c7916394a55","description":"http-proxy-middleware is node.js http-proxy middleware. From 3.0.4 until 3.0.7 and 4.1.1, fixRequestBody() is the library\u0027s documented helper for re-emitting a request body that was already consumed by a body parser. When the outgoing Content-Type is multipart/form-data, it rebuilds the body with handlerFormDataBodyData(), which interpolates each req.body key and value directly into the multipart wire format without neutralizing CR/LF. A \\r\\n inside a value (or key) lets an attacker close the current part and inject an entirely new form part. Because the proxy\u0027s own body parser saw a single opaque value, any gateway-side policy or validation performed on req.body is evaluated against a different set of fields than the upstream backend ultimately parses a request/parameter desynchronization across the trust boundary. This vulnerability is fixed in 3.0.7 and 4.1.1.","datePublished":"Jun 22, 2026, 8:07:05 PM","dateUpdated":"Jun 23, 2026, 12:21:14 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N","references":"https://github.com/chimurai/http-proxy-middleware/security/advisories/GHSA-gcq2-9pq2-cxqm\n","aliases":"CVE-2026-55603\nGHSA-gcq2-9pq2-cxqm\n","assigner":"GitHub_M","epss":0.29,"enisaIdProduct":[{"id":"21dbcefa-f8b0-3e8f-a9fa-6e58d4d80898","product":{"name":"http-proxy-middleware","vendor":{"name":"chimurai"}},"product_version":"4.0.0, \u003c 4.1.1"},{"id":"67b3c38f-0a40-3ebf-b73c-9ed10819cf4d","product":{"name":"http-proxy-middleware","vendor":{"name":"chimurai"}},"product_version":"3.0.4, \u003c 3.0.7"}],"enisaIdVendor":[{"id":"acaf926c-d607-3ad0-b02d-61752a92c6e0","vendor":{"name":"chimurai"}}],"enisaIdVulnerability":[{"id":"8839c62b-0c3c-318e-81b6-b7b322f7d15b","vulnerability":{"id":"GHSA-gcq2-9pq2-cxqm","description":"http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`","datePublished":"Jun 18, 2026, 1:06:21 PM","dateUpdated":"Jun 18, 2026, 1:06:21 PM","baseScore":0.0,"references":"https://github.com/chimurai/http-proxy-middleware/security/advisories/GHSA-gcq2-9pq2-cxqm\nhttps://github.com/chimurai/http-proxy-middleware\n","enisa_id":"EUVD-2026-38349\n","aliases":"CVE-2026-55603\nGHSA-gcq2-9pq2-cxqm\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"9e6ee01d-1198-3fad-a6d3-f1e8d564697b","vulnerability":{"id":"CVE-2026-55603","description":"http-proxy-middleware is node.js http-proxy middleware. From 3.0.4 until 3.0.7 and 4.1.1, fixRequestBody() is the library\u0027s documented helper for re-emitting a request body that was already consumed by a body parser. When the outgoing Content-Type is multipart/form-data, it rebuilds the body with handlerFormDataBodyData(), which interpolates each req.body key and value directly into the multipart wire format without neutralizing CR/LF. A \\r\\n inside a value (or key) lets an attacker close the current part and inject an entirely new form part. Because the proxy\u0027s own body parser saw a single opaque value, any gateway-side policy or validation performed on req.body is evaluated against a different set of fields than the upstream backend ultimately parses a request/parameter desynchronization across the trust boundary. This vulnerability is fixed in 3.0.7 and 4.1.1.","datePublished":"Jun 22, 2026, 8:07:05 PM","dateUpdated":"Jun 23, 2026, 12:21:14 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N","references":"https://github.com/chimurai/http-proxy-middleware/security/advisories/GHSA-gcq2-9pq2-cxqm\n","enisa_id":"EUVD-2026-38349\n","assigner":"GitHub_M","epss":0.29,"dataProcessed":"Nov 1, 2026, 7:17:06 AM","vulnerabilityProduct":[{"id":"5c024706-4156-3fd7-8149-60c42524a67f","product":{"name":"http-proxy-middleware","vendor":{"name":"chimurai"}},"product_version":"3.0.4, \u003c 3.0.7"},{"id":"86ac3f28-9f0e-3c59-b2db-86d9e72f92ce","product":{"name":"http-proxy-middleware","vendor":{"name":"chimurai"}},"product_version":"4.0.0, \u003c 4.1.1"}],"vulnerabilityVendor":[{"id":"3d74249b-dfdb-3a9d-885c-233091fd79ec","vendor":{"name":"chimurai"}}]}}],"enisaIdAdvisory":[{"id":"39807915-f960-363d-855b-9275ea484241","advisory":{"id":"RHSA-2026:50300","description":"Red Hat Security Advisory: Migration Toolkit for Applications","summary":"A new version of Migration Toolkit for Applications (MTA) is now available.","datePublished":"Aug 4, 2026, 5:05:10 PM","dateUpdated":"Oct 31, 2026, 5:41:40 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:50300\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50300.json\n","aliases":"CVE-2026-4926\nCVE-2026-12143\nCVE-2026-13149\nCVE-2026-25681\nCVE-2026-26996\nCVE-2026-27136\nCVE-2026-27904\nCVE-2026-33811\nCVE-2026-39820\nCVE-2026-39821\nCVE-2026-40895\nCVE-2026-42039\nCVE-2026-42041\nCVE-2026-42044\nCVE-2026-42264\nCVE-2026-42342\nCVE-2026-42499\nCVE-2026-42504\nCVE-2026-44486\nCVE-2026-44487\nCVE-2026-44488\nCVE-2026-44492\nCVE-2026-44494\nCVE-2026-44495\nCVE-2026-44496\nCVE-2026-55603\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"06f5ffad-ab45-34cc-8941-37f9a8fe98f9","product":{"name":"registry.redhat.io/mta/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0_amd64","vendor":{"name":"Red Hat"}}},{"id":"0cdb5f63-14d1-3d22-a243-f5084e60c50b","product":{"name":"registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:609847164532128273809aa9292e4f64f02354d77a065a00eddb4835766748c8_arm64","vendor":{"name":"Red Hat"}}},{"id":"0f7722ee-11b5-3a85-b3f5-e5435abc8c81","product":{"name":"registry.redhat.io/mta/mta-rhel9-operator@sha256:439729fd40aab21c427a919a6852cc90e8eb2c0206f21657946d7e48d396e09f_amd64","vendor":{"name":"Red Hat"}}},{"id":"2b8c5f36-0c67-3bdc-90a8-18279c468551","product":{"name":"registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:55ac64ef75bc633eadccf4da25f33ddef134c557b706746408b4da0cfb768042_amd64","vendor":{"name":"Red Hat"}}},{"id":"2bf02fd8-72c1-350f-a0c9-b8812d9bb249","product":{"name":"registry.redhat.io/mta/mta-cli-rhel9@sha256:5cf496005c3b5ff4c73f5adcb61f907362d82f47962b9c9a9c537b55b5ee0190_amd64","vendor":{"name":"Red Hat"}}},{"id":"33b2652a-cad3-316d-a863-873156d116fc","product":{"name":"registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:8f37cc914c03019849362f8ac3ff201ac2e93f9b567450c4b243ed2abc4a71b1_arm64","vendor":{"name":"Red Hat"}}},{"id":"382c5d00-78c5-3949-a68b-5eb7ed478f34","product":{"name":"Red Hat Migration Toolkit for Applications 8.1","vendor":{"name":"Red Hat"}}},{"id":"3f6692c6-6578-33b2-9204-db371c70e4bf","product":{"name":"registry.redhat.io/mta/mta-hub-rhel9@sha256:34711e4f558a3df0f65ee127b4fa30e7573a5d306bc9e642a83112b91fea591a_arm64","vendor":{"name":"Red Hat"}}},{"id":"518c412d-5634-3aab-8dbe-1fd084681856","product":{"name":"registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:64fa6c4a8a927f755be0eaa973abd7753c1c28c0086bf94f95a983b23b6c35ce_amd64","vendor":{"name":"Red Hat"}}},{"id":"55478b19-124d-3a40-875d-9cf152036f9b","product":{"name":"registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:f698ef08c8a61dc55a53b9c7d449b4f7862f7cacd7acb62d51d232e722d546f7_amd64","vendor":{"name":"Red Hat"}}},{"id":"5c94c909-1e96-3be8-ba67-901cc58e41d4","product":{"name":"registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64","vendor":{"name":"Red Hat"}}},{"id":"702fba8a-5e7e-321b-ba81-09f2d6d63c02","product":{"name":"registry.redhat.io/mta/mta-operator-bundle@sha256:bbd09e16e3f05d51319bc5a9ebc623aa6a9fea1e9c5843b28ff9dce2ca1c2b40_amd64","vendor":{"name":"Red Hat"}}},{"id":"82978d23-15a2-372f-a137-6e317eaf7d09","product":{"name":"registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:dd974ca667e38caa223f6d503e67b157f660fce5a65911b27919b24dca1b1290_arm64","vendor":{"name":"Red Hat"}}},{"id":"8a63586b-dcc4-398c-9a13-70eb35dff553","product":{"name":"registry.redhat.io/mta/mta-solution-server-rhel9@sha256:8a3113ec966da0b942695a61f6d381987049145e3670360061dd92427d095bec_arm64","vendor":{"name":"Red Hat"}}},{"id":"a9cd0717-3dfc-3517-a317-c93ab3b59f02","product":{"name":"registry.redhat.io/mta/mta-hub-rhel9@sha256:2115efc013299f9e2b9fec1adf1e44ca715cc260565b42537c4438d81c6a60bb_amd64","vendor":{"name":"Red Hat"}}},{"id":"c17a922a-9839-3000-9719-138ecd103c18","product":{"name":"registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64","vendor":{"name":"Red Hat"}}},{"id":"c9f902b4-ed8d-3461-a61c-17aa9bad380b","product":{"name":"registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64","vendor":{"name":"Red Hat"}}},{"id":"db51ad46-df68-3934-aa33-0efb97eddbdc","product":{"name":"registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:3c65b7377bc1a3430b6349dba1aecdd99787f20ad2c433a4d93585adc1c6674d_arm64","vendor":{"name":"Red Hat"}}},{"id":"e0f30326-9200-31ab-88c4-fc52e5e60db8","product":{"name":"registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:7c567b6de60eaa093c853e19066a80c4010dbbbf4e32af0d1fb2997f9549e3ab_amd64","vendor":{"name":"Red Hat"}}},{"id":"e0f54e71-518b-3ae2-b725-6f524088b60b","product":{"name":"registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:8d2acae43f6b37761ba89fa6471c5e7dbcaae48f27d88e32f07c78dd929a7d6d_amd64","vendor":{"name":"Red Hat"}}},{"id":"e2e14afb-8041-37dd-a511-54072a01b9cc","product":{"name":"registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:f2c008735c1fd182a1ecbf7afab32a9d1ffd40a09186c31daa41f8053bba66bd_arm64","vendor":{"name":"Red Hat"}}},{"id":"e42dd1a6-199c-3dad-a1ac-3d34f88a0f40","product":{"name":"registry.redhat.io/mta/mta-rhel9-operator@sha256:c5997585d3fe93881d80b9b32fd343ea81ef72e68b6eab676bf1312c1a6ee1d3_arm64","vendor":{"name":"Red Hat"}}},{"id":"eb009f77-c91c-3b16-8647-08a74d2de73f","product":{"name":"registry.redhat.io/mta/mta-cli-rhel9@sha256:d54304ee8d1e4ee8fd191a55eb585d2617fb434774ff0e4910e465addcc08e19_arm64","vendor":{"name":"Red Hat"}}},{"id":"fe49dfc1-1242-380b-be34-6b33cba80ccc","product":{"name":"registry.redhat.io/mta/mta-generic-external-provider-rhel9@sha256:dbea5a31d965cf3300144f3323ea30c9db33a05ab98cb343d5cdd9edb66f29f6_arm64","vendor":{"name":"Red Hat"}}}]}},{"id":"9a9e0919-7c79-3d12-9436-b9251cabe6c0","advisory":{"id":"WID-SEC-W-2026-3623","description":"IBM DataPower Gateway: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in IBM DataPower Gateway ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen, einen Denial-of-Service-Zustand auszulösen oder Cross-Site-Scripting-Angriffe durchzuführen.","datePublished":"Sep 28, 2026, 10:00:00 PM","dateUpdated":"Oct 8, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-3623\n","aliases":"CVE-2023-53781\nCVE-2025-14087\nCVE-2025-14512\nCVE-2025-21858\nCVE-2025-22105\nCVE-2025-37980\nCVE-2025-38015\nCVE-2025-38097\nCVE-2025-38180\nCVE-2025-38400\nCVE-2025-38405\nCVE-2025-38441\nCVE-2025-38470\nCVE-2025-38653\nCVE-2025-39766\nCVE-2025-39797\nCVE-2025-39866\nCVE-2025-40134\nCVE-2025-48431\nCVE-2025-5278\nCVE-2025-68183\nCVE-2025-68211\nCVE-2025-68214\nCVE-2025-68347\nCVE-2025-68366\nCVE-2025-68724\nCVE-2025-71066\nCVE-2025-71089\nCVE-2026-12143\nCVE-2026-13257\nCVE-2026-13258\nCVE-2026-13757\nCVE-2026-14269\nCVE-2026-14273\nCVE-2026-14496\nCVE-2026-14497\nCVE-2026-14502\nCVE-2026-14507\nCVE-2026-14508\nCVE-2026-14509\nCVE-2026-14888\nCVE-2026-14905\nCVE-2026-14988\nCVE-2026-14990\nCVE-2026-14991\nCVE-2026-14992\nCVE-2026-14999\nCVE-2026-15588\nCVE-2026-15762\nCVE-2026-15781\nCVE-2026-15784\nCVE-2026-15819\nCVE-2026-15822\nCVE-2026-15824\nCVE-2026-16111\nCVE-2026-16159\nCVE-2026-16161\nCVE-2026-16163\nCVE-2026-16164\nCVE-2026-16165\nCVE-2026-16167\nCVE-2026-16169\nCVE-2026-16170\nCVE-2026-16176\nCVE-2026-16177\nCVE-2026-16178\nCVE-2026-16179\nCVE-2026-16181\nCVE-2026-16182\nCVE-2026-16340\nCVE-2026-16439\nCVE-2026-16440\nCVE-2026-16441\nCVE-2026-2100\nCVE-2026-22979\nCVE-2026-22984\nCVE-2026-22990\nCVE-2026-23002\nCVE-2026-23060\nCVE-2026-23110\nCVE-2026-23204\nCVE-2026-23209\nCVE-2026-23216\nCVE-2026-23243\nCVE-2026-23270\nCVE-2026-23392\nCVE-2026-23455\nCVE-2026-2391\nCVE-2026-31411\nCVE-2026-31419\nCVE-2026-31488\nCVE-2026-31508\nCVE-2026-31532\nCVE-2026-31581\nCVE-2026-31607\nCVE-2026-31613\nCVE-2026-31669\nCVE-2026-31677\nCVE-2026-31684\nCVE-2026-31685\nCVE-2026-33845\nCVE-2026-33846\nCVE-2026-3832\nCVE-2026-3833\nCVE-2026-4046\nCVE-2026-41254\nCVE-2026-41602\nCVE-2026-41606\nCVE-2026-41607\nCVE-2026-42009\nCVE-2026-42010\nCVE-2026-42011\nCVE-2026-42012\nCVE-2026-42013\nCVE-2026-42014\nCVE-2026-42015\nCVE-2026-43027\nCVE-2026-43037\nCVE-2026-43038\nCVE-2026-43056\nCVE-2026-43074\nCVE-2026-43116\nCVE-2026-43125\nCVE-2026-43163\nCVE-2026-43190\nCVE-2026-43198\nCVE-2026-43260\nCVE-2026-43284\nCVE-2026-43303\nCVE-2026-43329\nCVE-2026-43499\nCVE-2026-43501\nCVE-2026-43868\nCVE-2026-43870\nCVE-2026-4437\nCVE-2026-4438\nCVE-2026-45852\nCVE-2026-46054\nCVE-2026-46086\nCVE-2026-46116\nCVE-2026-46173\nCVE-2026-46181\nCVE-2026-46242\nCVE-2026-46259\nCVE-2026-46300\nCVE-2026-46331\nCVE-2026-46333\nCVE-2026-46917\nCVE-2026-46968\nCVE-2026-47010\nCVE-2026-47021\nCVE-2026-47027\nCVE-2026-47059\nCVE-2026-47063\nCVE-2026-48144\nCVE-2026-48145\nCVE-2026-5260\nCVE-2026-52923\nCVE-2026-52991\nCVE-2026-53006\nCVE-2026-53009\nCVE-2026-53131\nCVE-2026-53189\nCVE-2026-53264\nCVE-2026-53266\nCVE-2026-5419\nCVE-2026-5450\nCVE-2026-55602\nCVE-2026-55603\nCVE-2026-55968\nCVE-2026-55970\nCVE-2026-58010\nCVE-2026-58011\nCVE-2026-58012\nCVE-2026-58013\nCVE-2026-58014\nCVE-2026-58015\nCVE-2026-58016\nCVE-2026-58662\nCVE-2026-59879\nCVE-2026-59880\nCVE-2026-60147\nCVE-2026-60589\nCVE-2026-61308\nCVE-2026-63913\nCVE-2026-63952\nCVE-2026-64017\nCVE-2026-64530\nCVE-2026-64560\nCVE-2026-70906\nCVE-2026-70907\nCVE-2026-74581\nCVE-2026-82417\nCVE-2026-82562\nCVE-2026-83605\nCVE-2026-83607\nCVE-2026-83608\nCVE-2026-83613\nCVE-2026-83614\nCVE-2026-83615\nCVE-2026-83616\nCVE-2026-83619\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"4f51b592-c737-351a-8744-f31e2e3ab145","product":{"name":"DataPower Gateway","vendor":{"name":"IBM"}}},{"id":"abd32b5f-76da-3819-864b-586a12ed6650","product":{"name":"10.5.0.23","vendor":{"name":"IBM"}}},{"id":"de564b51-b49e-3b66-9cc7-d9a0a5eef659","product":{"name":"11.0.0.3","vendor":{"name":"IBM"}}},{"id":"ed864776-3ad1-3c1c-8987-f3d168573d4c","product":{"name":"10.6.0.11","vendor":{"name":"IBM"}}}]}},{"id":"bc11d348-c051-3bfe-bfef-b5b37b56f108","advisory":{"id":"RHSA-2026:42085","description":"Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release","summary":"The 1.3.6 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3","datePublished":"Jul 20, 2026, 4:06:49 PM","dateUpdated":"Oct 30, 2026, 7:26:40 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:42085\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42085.json\n","aliases":"CVE-2026-42211\nCVE-2026-42342\nCVE-2026-44486\nCVE-2026-44487\nCVE-2026-44488\nCVE-2026-44492\nCVE-2026-44494\nCVE-2026-44496\nCVE-2026-55603\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"00e109e0-8926-3ecc-913d-cd0b2cbbcc47","product":{"name":"registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64","vendor":{"name":"Red Hat"}}},{"id":"3663cf73-5a11-37bf-9d37-735df68d40fe","product":{"name":"Red Hat Trusted Artifact Signer 1.3","vendor":{"name":"Red Hat"}}},{"id":"8bd58cef-7054-3047-9c35-4db7bae03bcd","product":{"name":"registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"e894a8a3-2bdf-34da-9af3-e288d4a86575","advisory":{"id":"NCSC-2026-0431","description":"Kwetsbaarheden verholpen in IBM DataPower Gateway en onderliggende componenten","datePublished":"Oct 16, 2026, 6:16:13 AM","dateUpdated":"Oct 16, 2026, 6:16:13 AM","baseScore":0.0,"references":"","aliases":"CVE-2023-53781\nCVE-2025-14087\nCVE-2025-14512\nCVE-2025-21858\nCVE-2025-22105\nCVE-2025-37980\nCVE-2025-38015\nCVE-2025-38097\nCVE-2025-38180\nCVE-2025-38400\nCVE-2025-38405\nCVE-2025-38441\nCVE-2025-38470\nCVE-2025-38653\nCVE-2025-39766\nCVE-2025-39797\nCVE-2025-39866\nCVE-2025-40134\nCVE-2025-48431\nCVE-2025-5278\nCVE-2025-68183\nCVE-2025-68211\nCVE-2025-68214\nCVE-2025-68347\nCVE-2025-68366\nCVE-2025-68724\nCVE-2025-71066\nCVE-2025-71089\nCVE-2026-12143\nCVE-2026-13257\nCVE-2026-13258\nCVE-2026-13757\nCVE-2026-14269\nCVE-2026-14273\nCVE-2026-14496\nCVE-2026-14497\nCVE-2026-14502\nCVE-2026-14507\nCVE-2026-14508\nCVE-2026-14509\nCVE-2026-14888\nCVE-2026-14905\nCVE-2026-14988\nCVE-2026-14990\nCVE-2026-14991\nCVE-2026-14992\nCVE-2026-14999\nCVE-2026-15588\nCVE-2026-15762\nCVE-2026-15781\nCVE-2026-15784\nCVE-2026-15819\nCVE-2026-15822\nCVE-2026-15824\nCVE-2026-16111\nCVE-2026-16159\nCVE-2026-16161\nCVE-2026-16163\nCVE-2026-16164\nCVE-2026-16165\nCVE-2026-16167\nCVE-2026-16169\nCVE-2026-16170\nCVE-2026-16176\nCVE-2026-16177\nCVE-2026-16178\nCVE-2026-16179\nCVE-2026-16181\nCVE-2026-16182\nCVE-2026-16340\nCVE-2026-16439\nCVE-2026-16440\nCVE-2026-16441\nCVE-2026-2100\nCVE-2026-22979\nCVE-2026-22984\nCVE-2026-22990\nCVE-2026-23002\nCVE-2026-23060\nCVE-2026-23110\nCVE-2026-23204\nCVE-2026-23209\nCVE-2026-23216\nCVE-2026-23243\nCVE-2026-23270\nCVE-2026-23392\nCVE-2026-23455\nCVE-2026-2391\nCVE-2026-31411\nCVE-2026-31419\nCVE-2026-31488\nCVE-2026-31508\nCVE-2026-31532\nCVE-2026-31581\nCVE-2026-31607\nCVE-2026-31613\nCVE-2026-31669\nCVE-2026-31677\nCVE-2026-31684\nCVE-2026-31685\nCVE-2026-33845\nCVE-2026-33846\nCVE-2026-3832\nCVE-2026-3833\nCVE-2026-4046\nCVE-2026-41254\nCVE-2026-41602\nCVE-2026-41606\nCVE-2026-41607\nCVE-2026-42009\nCVE-2026-42010\nCVE-2026-42011\nCVE-2026-42012\nCVE-2026-42013\nCVE-2026-42014\nCVE-2026-42015\nCVE-2026-43027\nCVE-2026-43037\nCVE-2026-43038\nCVE-2026-43056\nCVE-2026-43074\nCVE-2026-43116\nCVE-2026-43125\nCVE-2026-43163\nCVE-2026-43190\nCVE-2026-43198\nCVE-2026-43260\nCVE-2026-43284\nCVE-2026-43303\nCVE-2026-43329\nCVE-2026-43499\nCVE-2026-43501\nCVE-2026-43868\nCVE-2026-43870\nCVE-2026-4437\nCVE-2026-4438\nCVE-2026-45852\nCVE-2026-46054\nCVE-2026-46086\nCVE-2026-46116\nCVE-2026-46173\nCVE-2026-46181\nCVE-2026-46242\nCVE-2026-46259\nCVE-2026-46300\nCVE-2026-46331\nCVE-2026-46333\nCVE-2026-46917\nCVE-2026-46968\nCVE-2026-47010\nCVE-2026-47021\nCVE-2026-47027\nCVE-2026-47059\nCVE-2026-47063\nCVE-2026-48144\nCVE-2026-48145\nCVE-2026-5260\nCVE-2026-52923\nCVE-2026-52991\nCVE-2026-53006\nCVE-2026-53009\nCVE-2026-53131\nCVE-2026-53189\nCVE-2026-53264\nCVE-2026-53266\nCVE-2026-5419\nCVE-2026-5450\nCVE-2026-55602\nCVE-2026-55603\nCVE-2026-55968\nCVE-2026-55970\nCVE-2026-58010\nCVE-2026-58011\nCVE-2026-58012\nCVE-2026-58013\nCVE-2026-58014\nCVE-2026-58015\nCVE-2026-58016\nCVE-2026-58662\nCVE-2026-59879\nCVE-2026-59880\nCVE-2026-60147\nCVE-2026-60589\nCVE-2026-61308\nCVE-2026-63913\nCVE-2026-63952\nCVE-2026-64017\nCVE-2026-64530\nCVE-2026-64560\nCVE-2026-70906\nCVE-2026-70907\nCVE-2026-74581\nCVE-2026-82417\nCVE-2026-82562\nCVE-2026-83605\nCVE-2026-83607\nCVE-2026-83608\nCVE-2026-83613\nCVE-2026-83614\nCVE-2026-83615\nCVE-2026-83616\nCVE-2026-83619\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"19c5ee39-359c-33c2-b8e0-5b394f0e00a6","product":{"name":"DataPower Gateway 10.5.0","vendor":{"name":"IBM"}}},{"id":"4e15d7b1-11ca-3801-a88d-5758d5e86cbb","product":{"name":"DataPower Gateway","vendor":{"name":"IBM"}}},{"id":"8b3d501c-9655-36b9-878b-0ec9062258ad","product":{"name":"DataPower Gateway 10.6.0","vendor":{"name":"IBM"}}},{"id":"93894416-810e-330b-a54c-f475b4347d3f","product":{"name":"DataPower Gateway 10.6CD","vendor":{"name":"IBM"}}},{"id":"a57c4a82-e533-34af-afe4-24a6da4b361c","product":{"name":"DataPower Gateway 11.0.0","vendor":{"name":"IBM"}}}]}}]}