ibm bob vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 3.3CVE-2026-55142026-11-13

   IBM Bob 2.0.3 allows unauthorized extensions to retrieve session tokens via the authentication provider API. The token is exposed in the account identifier field during account enumeration, without requiring explicit user consent. This may…