IBM vulnerabilities
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-84889A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem
- CVE-2026-86087IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system
- CVE-2026-86093IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain conditions
- CVE-2026-87958IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions
- CVE-2026-85025Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
- CVE-2026-9667IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-9176IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-9225Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation
- CVE-2026-9327IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-9336IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-9338IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-19625IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
- CVE-2026-19651IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
- CVE-2026-13297Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-14350Vulnerabilities exists in IBM Cloud Pak for Data System
- CVE-2026-14470Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components
- CVE-2026-16180IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- CVE-2026-16660IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
- CVE-2026-16689IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- CVE-2026-16693IBM i is Affected By Cryptographic Algorithm Weakness in DCM []
- CVE-2026-16826IBM i is Affected By Multiple Vulnerabilities in Debug Server
- CVE-2026-16892IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service []
- CVE-2026-16941IBM i is Affected By An Incorrect Authorization Vulnerability []
- CVE-2026-17057IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]
- CVE-2026-17207IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]
- CVE-2026-17255IBM i is Affected By Denial of Service Vulnerability []
- CVE-2026-17259IBM i is Affected By Multiple Vulnerabilities in Debug Server
- CVE-2026-17270IBM i is Affected By Multiple Vulnerabilities in Debug Server
- CVE-2026-17273IBM i is Affected By Multiple Vulnerabilities in Debug Server
- CVE-2026-17274IBM i is Affected By Multiple Vulnerabilities in Debug Server