IBM vulnerabilities
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-10853IBM MQ queue manager is vulnerable to remote code execution
- CVE-2026-10841IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
- CVE-2026-10751IBM MQ Java messaging is vulnerable to remote code execution
- CVE-2026-10747IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing
- CVE-2026-10744IBM MQ for HPE NonStop is vulnerable to a issue in MQINQ request validation
- CVE-2026-10575IBM MQ queue manager is vulnerable to remote code execution
- CVE-2026-1037Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
- CVE-2026-1031Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
- CVE-2026-1030Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
- CVE-2026-1029Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
- CVE-2026-1025Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
- CVE-2026-10030IBM MQ Console is vulnerable to privilege escalation
- CVE-2026-10027IBM MQ queue manager is vulnerable to unauthenticated remote code execution
- CVE-2025-36421Multiple vulnerabilities in IBM Controller
- CVE-2025-36178Multiple vulnerabilities in IBM Controller
- CVE-2025-36147IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting.
- CVE-2025-36076IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
- CVE-2025-36045TS4300 Tape Library addresses security vulnerability
- CVE-2025-33147IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
- CVE-2025-33141IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
- CVE-2025-15399Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
- CVE-2025-14754IBM Cloud Pak for Data is vulnerable to OS command injection
- CVE-2025-14753IBM Cloud Pak for Data is vulnerable to path traversal
- CVE-2025-13882Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.
- CVE-2025-1350Multiple vulnerabilities in IBM Controller
- CVE-2024-56344IBM Cognos Analytics 12.0.4 and 12.1.3 versions are affected by security vulnerabilities
- CVE-2026-11728IBM MQ .NET client is vulnerable to remote code execution
- CVE-2026-11729IBM MQ Java messaging is vulnerable to remote code execution
- CVE-2026-11864Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- CVE-2026-11918IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structures