Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 21:07:32 +0000 CVE-2026-13773 — IBM WebSphere eXtreme Scale is affected by server side request forgery when ORB is used as Transport Protocol https://cve.radiocsirt.org/vuln/cve-2026-13773 <p><strong>Affected:</strong> IBM WebSphere Extreme Scale</p> <p>IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSphere eXtreme Scale&#39;s ogclient.jar call ORB.string_to_object() on an attacker-controlled IOR string during Java deserialization, turning any unfiltered ObjectInputStream sink in WAS into outbound IIOP SSRF to an attacker-chosen host; when chained with the IBM ORB&#39;s getUserException class-instantiation flaw (WAS-26), this SSRF escalates to remote code execution on the calling JVM.</p> <p><strong>Affected:</strong> IBM WebSphere Extreme Scale</p> <p>IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSphere eXtreme Scale&#39;s ogclient.jar call ORB.string_to_object() on an attacker-controlled IOR string during Java deserialization, turning any unfiltered ObjectInputStream sink in WAS into outbound IIOP SSRF to an attacker-chosen host; when chained with the IBM ORB&#39;s getUserException class-instantiation flaw (WAS-26), this SSRF escalates to remote code execution on the calling JVM.</p> https://cve.radiocsirt.org/vuln/cve-2026-13773