CVE-2025-2529Low· 2.9▾ SunlitApplications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from (malicious) external parties in an unfiltered/unsalted way.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 16 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from (malicious) external parties in an unfiltered/unsalted way.
terracotta >= 10.15.0, < 10.15.0.23terracotta >= 11.1.0, < 11.1.0.5Upgrade past the affected range:
terracotta 11.1.0.5Connected by shared product, vendor, weakness, or advisory.
CVE-2026-94402Medium· 6.1IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation
CVE-2026-93888High· 7.8IBM Sterling Connect:Direct for Unix Buffer Overflow
CVE-2026-82891High· 8.1IBM Guardium Data Protection is affected by a security vulnerability
CVE-2026-93744Medium· 6.5IBM i Improper Authentication
CVE-2026-93442High· 8.2IBM QRadar SIEM Out-of-bounds Read
CVE-2026-93441High· 8.6IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service