Release Notes
Abstract
The following table contains the complete listing of fixes for IBM Content Navigator version 26.0.1
Content
Known Issues and vulnerabilities fixed in IBM Content Navigator version 26.0.1
| Known Issues | Description |
|---|---|
| Security Vulnerability | CVE-2026-12185, CVE-2026-59652, CVE-2026-59651, CVE-2026-59648, CVE-2026-59647, CVE-2026-13586, CVE-2026-15055, CVE-2026-58063 resolved by upgrading bcprov-jdk18on.jar to 1.85 in DocuSign Plugin. |
| Security Vulnerability | CVE-2026-19032 resolved by upgrading jackson-databind jar to jackson-databind-2.22.2.jar. |
| Security Vulnerability | CVE-2026-40021 in log4net.2.0.11.nupkg resolved. |
| Security Vulnerability | CVE-2026-41838 CVE-2026-41839 CVE-2026-41840 CVE-2026-41841 CVE-2026-41842 CVE-2026-41843 CVE-2026-41844 CVE-2026-41845 CVE-2026-41846 CVE-2026-41847 CVE-2026-41848 CVE-2026-41849 CVE-2026-41850 CVE-2026-41851 CVE-2026-41852 CVE-2026-41853 CVE-2026-41855 resolved by updating Spring framework in the Sync Server component. |
| Security Vulnerability | CVE-2026-41853 addressed by upgrading Spring Framework to 5.3.39-spring-framework-5.3.53 in the Sync Server. |
| Security Vulnerability | CVE-2026-49844 addressed by updating Apache Log4j API to 2.25.5. |
| Security Vulnerability | CVE-2026-54399 addressed by updating to httpcore5 jar to 5.2.4. |
| Security Vulnerability | CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516, CVE-2026-54517, and CVE-2026-54518 resolved by upgrading Snowbound from 20.21.1 to 20.21.13, aligning bundled Jackson dependencies with version 2.22.1. |
| Security Vulnerability | CVE-2026-54515 in jackson-databind packaged resolved by upgrading to v2.21.5. |
| Security Vulnerability | CVE-2026-59880, CVE-2026-59879 resolved. |
| Security Vulnerability | CVE-2026-71290, CVE-2026-64607 resolved by upgrading httpclient5.jar to 5.6.3 in Task Manager. |
| Security Vulnerability | CVE-2026-67320 resolved by upgrading axios package to 1.18.0. |
| Security Vulnerability | CVE-2026-71290, CVE-2026-64607 resolved by upgrading httpclient5.jar to 5.6.4 in Task Manager. |
| Security Vulnerability | CVE-2026-7587 and a potential LDAP injection vulnerability resolved. |
| Security Vulnerability | CVE-2026-9563 resolved by updating Parsson jar to 1.1.9 in icnBaiEmitterPlugin (DoS vulnerability). |
| Security Vulnerability | CVE-2026-12143 in Navigator for Microsoft Office resolved by upgrading form-data package from v4.0.5 to v4.0.6. |
| DT442847 | (IBM Content Navigator users) Asynchronous tasks run multiple times in cluster deployment. |
| DT471429 | (IBM Content Navigatvor users) The DocuSign signature status is always visible in the magazine view of search results. |
| DT471838 | (IBM Content Navigator users) An "Update DocuSign signature status configuration" task, scheduled to run daily, fails to run after running successfully for the first time. |
| DT472034 | (IBM Datacap Navigator plugin users) After saving a path value for 'Temporary directory for scanned images' field in Datacap Navigator Settings and logging out, re-login attempt fails with a JSON error in the server log. |
| DT472082 | (IBM Content Navigator users) Attempt to use ICN administration desktop with Swedish language, results in an error in the ICN server log, “A the key value is invalid: name”. |
| DT472879 | (IBM Content Navigator users) Simultaneous access to configuration database from multiple nodes, may result in accessing stale configuration data. |
| DT472916 | (IBM Content Navigator users) - “More Info” button under Document or Folder properties -> Security -> Roles fails with JavaScript error. |
| DT473970 | (IBM Content Navigator users) Older version Log4j jars are not removed by installer. |
| DT475242 | (IBM Content Navigator users) Export All action splits multi-line text in a content row into multiple rows, while Export action does not. |
| DT473970 | (IBM Content Navigator users) Older version Log4j jars are not removed by installer. |
| DT475682 | (IBM Content Navigator users) ICN Admin REST API throws error about invalid input if plugin ID contains underscore character. |
| DT497067 | (IBM Content Navigator users) Export action does not add column values to properties.csv file. |
| DT499696 | (IBM Content Navigator users) Some data in the Sync ping page is returned without a check for credentials. |
[{"Type":"MASTER","Line of Business":{"code":"LOB18","label":"Miscellaneous LOB"},"Business Unit":{"code":"BU056","label":"Miscellaneous"},"Product":{"code":"SSEUEX","label":"IBM Content Navigator"},"ARM Category":[{"code":"a8m3p000000LRz9AAG","label":"IBM Content Navigator"}],"ARM Case Number":"","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"},{"code":"PF055","label":"zLinux"}],"Version":"26.0.1"}]
Was this topic helpful?
Document Information
Modified date:
02 October 2026
UID
ibm17290342