IBM vulnerabilities
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-14275IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
- CVE-2026-14276IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
- CVE-2026-14277IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
- CVE-2026-18069IBM i is Affected By A Race Condition Vulnerability in SQL Query Engine []
- CVE-2026-19273The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control
- CVE-2026-19086IBM i is Affected By Multiple Vulnerabilities in PASE [, ]
- CVE-2026-19280IBM i is Affected By Multiple Vulnerabilities in PASE [, ]
- CVE-2026-19290IBM Sterling File Gateway is Vulnerable to Improper Access Control
- CVE-2026-75792IBM Sterling Secure Proxy is vulnerable to multiple issues
- CVE-2026-78415IBM Sterling Secure Proxy is vulnerable to multiple issues
- CVE-2026-7884IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
- CVE-2026-12763Langflow is vulnerable to authentication bypass and insufficient session expiration
- CVE-2026-12765Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components
- CVE-2026-12766Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components
- CVE-2026-12767Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches
- CVE-2026-13107Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
- CVE-2026-13260Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-13272Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-13276Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-13277Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-15396IBM WebSphere Application Server IBM WebSphere Application Server - Liberty HTTP Request Smuggling
- CVE-2026-15412IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Open Redirect
- CVE-2026-15634IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Request Smuggling
- CVE-2026-15887IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-15955IBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths
- CVE-2026-16186IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-16185IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-16187IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-16188IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-16190IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities