General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2026-42778 | The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: … | Critical (9.8) | 2026-05-01 | General Purpose |
| CVE-2026-42404 | Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the Poli… | Medium (6.5) | 2026-05-01 | General Purpose |
| CVE-2026-5405 | RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code… | High (7.8) | 2026-05-01 | General Purpose |
| CVE-2026-1577 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) coul… | Medium (6.5) | 2026-04-30 | General Purpose |
| CVE-2026-41016 | Apache Airflow's SMTP provider `SmtpHook` called Python's `smtplib.SMTP.starttls()` without an SSL context, so no certi… | Medium (5.9) | 2026-04-30 | General Purpose |