IBM vulnerabilities
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-120113Multiple vulnerabilities in IBM Aspera Connect
- CVE-2026-119670Vulnerabilities in spring-context, logback-core and Another JSON Schema Validator might affect IBM Storage Defender Copy Data Management
- CVE-2026-117545IBM webMethods Integration Server is vulnerable of bypassing the two-factor authentication mechanism.
- CVE-2026-116501Qiskit SDK C API may trigger an out of bounds write on accessing the unitary matrix with qk_circuit_inst_unitary().
- CVE-2026-116500Unbound Recursion in QPY deserialization can lead to denial of service
- CVE-2026-116499Arbitrary Code Execution in Qiskit SDK QPY Deserialization
- CVE-2026-115554Tivoli Netcool/OMNIbus Web GUI is vulnerable to stored cross-site scripting
- CVE-2026-11547IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
- CVE-2026-114464Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
- CVE-2026-113698IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table
- CVE-2026-112369Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
- CVE-2026-110273Security Vulnerability identified in IBM TRIRIGA - Command Execution
- CVE-2026-10844IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
- CVE-2026-108292Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
- CVE-2026-108284IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
- CVE-2026-107331DataStage on Cloud Pak for Data has several vulnerabilities
- CVE-2026-107330DataStage on Cloud Pak for Data has several vulnerabilities
- CVE-2026-105473IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS
- CVE-2026-105467IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS
- CVE-2026-103320IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
- CVE-2026-102618IBM i is Affected by a Protection Mechanism Failure
- CVE-2026-101117IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.
- CVE-2025-36075IBM Safer Payments could allow an authenticated user to obtain sensitive information
- CVE-2025-1837Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge
- CVE-2025-0166Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge
- CVE-2024-41786IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure Rule
- CVE-2026-18535IBM API Connect Denial of Service
- CVE-2026-19124Multiple Vulnerabilities in IBM API Connect
- CVE-2026-17393Multiple Vulnerabilities in IBM API Connect
- CVE-2026-17386Multiple Vulnerabilities in IBM API Connect