IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-12943This Power Hardware Management Console update is being released to address
- CVE-2026-12733IBM DataPower Gateway affected by denial of service
- CVE-2025-36374IBM DataPower Gateway affected by XML external entity injection
- CVE-2026-12118IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data
- CVE-2025-0152IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities
- CVE-2026-10535IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell
- CVE-2026-10695IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries
- CVE-2026-11904Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-10700Broken Access Control Vulnerabilities in Langflow 1.0.0 - 1.8.4 File Handling API Allowed Unauthorized Access to User Files
- CVE-2026-13435Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure
- CVE-2026-12942Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints
- CVE-2026-12945Langflow is affected by exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- CVE-2026-12940Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpoints
- CVE-2026-11885Power System update in Buffer Copy
- CVE-2026-9322IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
- CVE-2026-10842IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability
- CVE-2025-36431XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
- CVE-2025-36298Security Vulnerability in Ebics server affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
- CVE-2026-11897IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2
- CVE-2026-12947IBM App Connect Enterprise is vulnerable to Confidentiality disclosure on Discovery Connector nodes
- CVE-2026-11980Code execution in IBM Desktop App
- CVE-2026-11707Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager
- CVE-2026-11383Cross-site Scripting in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager
- CVE-2026-14980IBM WebSphere Application Server Liberty is affected by a cross-site request forgery
- CVE-2026-15435IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability
- CVE-2026-14522IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
- CVE-2026-14519IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
- CVE-2026-16308IBM Enterprise Build of Quarkus is affected by a DoS vulnerability
- CVE-2026-2482IBM WebSphere Application Server Liberty is affected by a cross-site request forgery
- CVE-2026-14529IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery