IBM vulnerabilities
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-16189IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-16335DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- CVE-2026-16338DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- CVE-2026-16435IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-16432DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- CVE-2026-16428DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- CVE-2026-16466DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- CVE-2026-16673DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- CVE-2026-16702IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference
- CVE-2026-17047IBM Db2 Mirror for i is vulnerable to Cross-Site Request Forgery []
- CVE-2026-17133IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
- CVE-2026-17156IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
- CVE-2026-17463IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption
- CVE-2026-17416IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
- CVE-2026-17467Vulnerabilities exists in IBM Cloud Pak for Data System
- CVE-2026-17628Langflow is affected by improper authentication due to missing password verification in the password reset endpoint
- CVE-2026-18065IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.
- CVE-2026-18251IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.
- CVE-2026-18151IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.
- CVE-2026-18515IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.
- CVE-2026-19543Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
- CVE-2026-53708ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
- CVE-2026-2310IBM webMethods Integration Server is vulnerable to an XML external entity injection (XXE) attack when processing XML data
- CVE-2026-19646Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
- CVE-2026-75624IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Service
- CVE-2026-75777Multiple vulnerabilities in IBM Aspera Enterprise Webapps
- CVE-2026-76059Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
- CVE-2026-78569Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
- CVE-2026-78571Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
- CVE-2026-78573IBM ContextForge MCP Gateway is affected by use of default credentials