IBM vulnerabilities
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-105443IBM WebSphere Application Server Liberty is affected by an improper access control
- CVE-2026-11713IBM WebSphere Application Server Liberty Incorrect Authorization
- CVE-2026-14532IBM WebSphere Application Server Liberty Integer Overflow
- CVE-2026-14909IBM WebSphere Application Server Liberty Information Disclosure
- CVE-2026-77816IBM WebSphere Application Server Liberty Improper Certificate Validation
- CVE-2026-79715IBM WebSphere Application Server Liberty Path Traversal
- CVE-2026-53711MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI
- CVE-2026-53709MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery
- CVE-2026-93907IBM WebSphere Application Server is affected by a bypass authentication vulnerability
- CVE-2026-95680IBM WebSphere Application Server is affected by an authorization bypass
- CVE-2026-103499IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
- CVE-2026-17484IBM i is Information Disclosure
- CVE-2026-17487IBM i is Information Disclosure
- CVE-2026-18318IBM i Information Disclosure
- CVE-2026-18343IBM i is Affected By An Improper Privilege Management Vulnerability
- CVE-2026-81858IBM i is Affected By A Denial of Service Vulnerability in Host Servers
- CVE-2026-93886IBM i is Affected By An Improper Neutralization of Input Vulnerability in HTTP Server Administration GUI
- CVE-2026-96119IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI
- CVE-2026-75076IBM Aspera Enterprise Webapps Information Disclosure
- CVE-2026-75095IBM Aspera Enterprise Webapps Denial of Service
- CVE-2026-75621IBM Aspera Enterprise Webapps Execution with Unnecessary Privileges
- CVE-2026-75782IBM Aspera Enterprise Webapps Untrusted Search Path
- CVE-2026-92832IBM Aspera Enterprise Webapps Information Disclosure
- CVE-2026-93891Security Vulnerability identified in IBM TRIRIGA - XXE
- CVE-2026-93892Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in Admin Console
- CVE-2026-102627Security Vulnerability identified in IBM TRIRIGA - Zip Slip
- CVE-2026-17475IBM Planning Analytics Local is affected by security vulnerabilities
- CVE-2026-18541IBM Planning Analytics Local is affected by security vulnerabilities
- CVE-2026-19620IBM Planning Analytics Local is affected by security vulnerabilities
- CVE-2026-19622IBM Planning Analytics Local is affected by security vulnerabilities