IBM vulnerabilities
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-11921Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-11926Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-11927Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-11928Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-11929Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-11934Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-12101Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-12150IBM MQ queue manager is vulnerable to denial of service
- CVE-2026-12351IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection
- CVE-2026-12354IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection
- CVE-2026-12355IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution
- CVE-2026-12358Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-12666IBM MQ Java messaging is vulnerable to XML external entity injection
- CVE-2026-12667IBM MQ .NET client is vulnerable to XML external entity injection
- CVE-2026-12728IBM MQ Java messaging is vulnerable to remote code execution
- CVE-2026-12742Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
- CVE-2026-12749Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- CVE-2026-12750Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- CVE-2026-12751Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- CVE-2026-12752Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026
- CVE-2026-53710MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
- CVE-2026-12944Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
- CVE-2026-12756Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
- CVE-2026-12758Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- CVE-2026-12759Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- CVE-2026-13265IBM MQ Managed File Transfer REST API is vulnerable to XML external entity injection
- CVE-2026-13275IBM MQ Managed File Transfer is vulnerable to XML external entity injection
- CVE-2026-13285IBM MQ Managed File Transfer is vulnerable to XML external entity injection
- CVE-2026-13293IBM MQ Java messaging is vulnerable to remote code execution
- CVE-2026-13287IBM MQ Managed File Transfer is vulnerable to XML external entity injection