IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-9130Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
- CVE-2026-10547Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
- CVE-2026-7869Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
- CVE-2026-8470Langflow is affected by weaknesses in secret handling and sensitive configuration access
- CVE-2026-9205Langflow is affected by weaknesses in secret handling and sensitive configuration access
- CVE-2026-10128Langflow is affected by weaknesses in secret handling and sensitive configuration access
- CVE-2026-9081Langflow OSS is affected by server-side request forgery in provider validation and API request functionality
- CVE-2026-7657Langflow OSS is affected by server-side request forgery in provider validation and API request functionality
- CVE-2026-17625Langflow is affected by OS Command Injection in Model Context Protocol features
- CVE-2026-17623Langflow is affected OS Command Injection in Model Context Protocol features
- CVE-2026-17630Langflow is affected by security vulnerabilities in Model Context Protocol features
- CVE-2026-17626Langflow is affected by security vulnerabilities in Model Context Protocol features
- CVE-2026-8446Langflow is affected by security vulnerabilities in Model Context Protocol features
- CVE-2026-7646Langflow is affected by security vulnerabilities in Model Context Protocol features
- CVE-2026-9077Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features
- CVE-2026-17617Server-Side Request Forgery (SSRF) in IBM Application Gateway Operator
- CVE-2026-15656IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret
- CVE-2026-18531IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret
- CVE-2026-10025IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability
- CVE-2026-13477IBM QRadar SIEM is vulnerable to remote code execution by privileged users
- CVE-2026-8400Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU
- CVE-2026-12730Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers
- CVE-2026-12762Insertion of Sensitive Information into Externally-Accessible File in IBM Business Automation Insights
- CVE-2026-10569IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Exposure of Sensitive Information Vulnerability
- CVE-2026-11536IBM WebSphere Application Server is affected by a remote code execution vulnerability
- CVE-2026-12946Remote Code Execution in CUGA Component CodeAgent
- CVE-2026-13444Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- CVE-2024-25039IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities
- CVE-2024-40683IBM Operations Analytics - Log Analysis is affected by a TOCTOU weakness allowing active sessions to persist beyond a password change
- CVE-2026-10545IBM Planning Analytics Local is affected by Open Redirect