SB20261107422 - Multiple vulnerabilities in Communications Unified Assurance

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261107422

SB20261107422 - Multiple vulnerabilities in Communications Unified Assurance

Published: November 7, 2026

Security Bulletin ID SB20261107422
CSH Severity
High
Patch available
YES
Number of vulnerabilities 7
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 57% Medium 14% Low 29%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 7 vulnerabilities.


1) Improper input validation (CVE-ID: CVE-2026-4176)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The vulnerability exists due to improper input validation within the Third-party components (Perl) component in TimesTen In-Memory Database. A remote non-authenticated attacker can exploit this vulnerability to execute arbitrary code.


2) Improper input validation (CVE-ID: CVE-2026-42779)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The vulnerability exists due to improper input validation within the Cartridges (Apache Mina) component in Oracle Communications Network Integrity. A remote non-authenticated attacker can exploit this vulnerability to execute arbitrary code.


3) Use-after-free (CVE-ID: CVE-2026-29167)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to use-after-free in mod_ldap per-directory configuration when processing per-directory configuration. A local user can trigger processing of affected per-directory configuration to cause a denial of service.


4) Insufficient Technical Documentation (CVE-ID: CVE-2026-59084)

CWE-ID: CWE-1059 - Insufficient Technical Documentation

CVSSv4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to bypass encryption protections.

The vulnerability exists due to improper documentation in EncryptInterceptor configuration when deploying the feature. A remote user can leverage an insecure configuration to bypass encryption protections.


5) Sensitive Information in Resource Not Removed Before Reuse (CVE-ID: CVE-2026-5795)

CWE-ID: CWE-226 - Sensitive Information in Resource Not Removed Before Reuse

CVSSv4: 9.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to escalate privileges.

The vulnerability exists due to sensitive information in resource not removed before reuse in JaspiAuthenticator.java when handling certain error or incomplete authentication flows. A remote attacker can trigger a request sequence that leaves residual authentication metadata in ThreadLocal storage to escalate privileges.

A subsequent unprivileged request processed by the same worker thread may inherit residual security roles if a mandatory CallerPrincipalCallback is missing or an exception occurs after a GroupPrincipalCallback has been persisted.


6) Stack-based buffer overflow (CVE-ID: CVE-2025-13151)

CWE-ID: CWE-121 - Stack-based buffer overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a boundary error within the asn1_expend_octet_string() function. A remote attacker can pass specially crafted certificate to the application, trigger a stack-based buffer overflow and perform a denial of service attack..



7) Code Injection (CVE-ID: CVE-2026-4800)

CWE-ID: CWE-94 - Improper Control of Generation of Code ('Code Injection')

CVSSv4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to improper control of code generation in _.template when processing untrusted options.imports key names. A remote attacker can supply crafted imports key names to execute arbitrary code.

Code execution occurs at template compilation time. If Object.prototype has been polluted by another vector, inherited polluted keys can also be copied into the imports object and passed to Function().


Remediation

Install update from vendor's website.

References