IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-17440IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- CVE-2026-17442IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- CVE-2026-17443IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- CVE-2026-17444IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- CVE-2026-17469IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]
- CVE-2026-17470IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]
- CVE-2026-17483IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
- CVE-2026-17499IBM i is Affected By Multiple Vulnerabilities in Debug Server
- CVE-2026-17627Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpoint
- CVE-2026-17621Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components
- CVE-2026-17622Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components
- CVE-2026-17631Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components
- CVE-2026-18073IBM i is Affected By Multiple Vulnerabilities in Debug Server
- CVE-2026-18078IBM i is Affected By Denial of Service Vulnerability in Save Restore []
- CVE-2026-18076IBM i is Affected By Multiple Vulnerabilities in Debug Server
- CVE-2026-18175IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [, ]
- CVE-2026-18221IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [, ]
- CVE-2026-18341IBM i is Affected By Buffer Overflow Vulnerability []
- CVE-2026-18486IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution
- CVE-2026-18489IBM ContextForge Translate is affected by cross-client credential context confusion
- CVE-2026-18567IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
- CVE-2026-18658IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed
- CVE-2026-18858IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH []
- CVE-2026-18887IBM i is Affected By Sensitive Information Exposure Vulnerability in PASE []
- CVE-2026-19298Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint
- CVE-2026-19301Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components
- CVE-2026-19303Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components
- CVE-2026-18905IBM ContextForge MCP Gateway is affected by server-side request forgery via DNS TOCTOU at tool invocation
- CVE-2026-19274IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
- CVE-2026-19283IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image