CVE-2026-1265
published 2026-03-03CVE-2026-1265: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to writing of sensitive Information in a log file.
PriorityP428medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.20%
9.6th percentile
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to writing of sensitive Information in a log file.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | infosphere_information_server | 11.7 – 11.7.1.6 | — |
| ibm | infosphere_information_server | 11.7.0.0 – 11.7.1.6 | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-qf5x-jv3x-595j: IBM InfoSphere Information Server 11
ghsa_unreviewed·2026-03-03
CVE-2026-1265 [MEDIUM] CWE-532 GHSA-qf5x-jv3x-595j: IBM InfoSphere Information Server 11
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to writing of sensitive Information in a log file.
Red Hat
wasmtime: wasmtime: Memory corruption via preemption checks during bulk operations
vendor_redhat·2026-10-02·CVSS 2.0
CVE-2026-104855 [LOW] CWE-1265 wasmtime: wasmtime: Memory corruption via preemption checks during bulk operations
wasmtime: wasmtime: Memory corruption via preemption checks during bulk operations
A flaw was found in wasmtime. Execution preemption checks during bulk operations can expose an invalid intermediate state if an application mutates or continues using the execution store after a cancellation or trap. Under these conditions, an attacker executing WebAssembly code can cause memory corruption, invalid memory access, or an application crash resulting in a Denial of Service (DoS).
Package: rhcl-1/wasm-shim-rhel9 (Red Hat Connectivity Link 1) - Fix deferred
Package: tree-sitter (Red Hat Enterprise Linux 10) - Fix deferred
Package: virt-firmware-rs (Red Hat Enterprise Linux 10) - Fix deferred
Package: openshell (Red Hat Hardened Images) - Not affected
Package: rust (Red Hat Hardened Images) -
Red Hat
rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data
vendor_redhat·2026-08-31·CVSS 5.5
CVE-2026-82797 [MEDIUM] CWE-1265 rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data
rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads.
This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.
A flaw was found in rlottie. This uncontrolled recursion vulnerability allows a local attacker to cause a denial of service (DoS) by providing specially crafted serialized data with nested payloads. Successful exploitation requires user interaction to process the malicious data.
Statement: The rlottie library is shipped in Fedora and EPEL community distributions. The uncontrolled recursion vulnerability can be triggered by processing specially crafted serialized data with nested payloads, leading to a denial of servic
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-03-03
Published