PULSEUnderground Intel

AO VIVO29sinais / 24h

FEED

ransomqilin reclama a Oak Green School · GB · Educationransomqilin reclama a Gandol Doors · TR · Manufacturingransomqilin reclama a Amber Management Ltd · GB · Otherransomrhysida reclama a Tribunal de Justica do Estado de Minas Gerais · BR · Government & Defenseransompayload reclama a Autohaus Arnold · DE · Retail & E-Commerceransompayload reclama a Braucoransompayload reclama a Schroers Ingenieure · DE · Professional Servicesransompayload reclama a Otto Stops · Transportationransommetaencryptor reclama a Christie Digital Systems · US · Technologyransommetaencryptor reclama a Daeah E&C · KR · Manufacturingransommetaencryptor reclama a DAEWON Chemical · KR · Manufacturingransommetaencryptor reclama a Wooshin Systems · KR · Technologyransommetaencryptor reclama a Proterial America, Ltd. · US · Manufacturingransommetaencryptor reclama a Hyundai E&C · KR · Manufacturingransomqilin reclama a Oak Green School · GB · Educationransomqilin reclama a Gandol Doors · TR · Manufacturingransomqilin reclama a Amber Management Ltd · GB · Otherransomrhysida reclama a Tribunal de Justica do Estado de Minas Gerais · BR · Government & Defenseransompayload reclama a Autohaus Arnold · DE · Retail & E-Commerceransompayload reclama a Braucoransompayload reclama a Schroers Ingenieure · DE · Professional Servicesransompayload reclama a Otto Stops · Transportationransommetaencryptor reclama a Christie Digital Systems · US · Technologyransommetaencryptor reclama a Daeah E&C · KR · Manufacturingransommetaencryptor reclama a DAEWON Chemical · KR · Manufacturingransommetaencryptor reclama a Wooshin Systems · KR · Technologyransommetaencryptor reclama a Proterial America, Ltd. · US · Manufacturingransommetaencryptor reclama a Hyundai E&C · KR · Manufacturing

← Todos os CVEs

CVE Watch3 de nov. de 2026

CVE-2026-4405

IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.

CVSS

4.0

Média

EPSS

0.1%

p4

KEV

—

Exploit Today

1

0-100

Publicado: 19 de out. de 2026 · Última mod.: 3 de nov. de 2026 · CWE-525

EPSS · 30d

0.1%EPSS · 30 dias0.2%

2026-10-202026-11-06

Descrição técnica

IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.

Referências oficiais

www.ibm.comhttps://www.ibm.com/support/pages/node/7292374

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1185715.9 MÉD

——1Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.3, from 3.0.0 to 3.0.3.1d CVE-2026-1185505.9 MÉD

——3Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.1d CVE-2026-1145483.7 BAI

——1Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2.1d CVE-2026-1145463.7 BAI

——1Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2.1d CVE-2026-1145425.4 MÉD

——1Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) & OpenID Connect versions: from 6.1.0 to 6.1.3.1d CVE-2026-96369—

——3Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.17d