IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-13442Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints
- CVE-2026-13463Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []
- CVE-2026-14446IBM WebSphere Application Server is affected by a privilege escalation
- CVE-2026-14515IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities
- CVE-2026-14512IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information
- CVE-2026-14528IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information
- CVE-2026-14893IBM Instana Observability is affected by multiple Prototype Pollution within Instana Agent container image
- CVE-2026-14958OS command injection in IBM Aspera Faspex
- CVE-2026-14959OS Command Injection in IBM Aspera Faspex
- CVE-2026-14973Path Traversal in IBM Desktop App
- CVE-2026-14974IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities
- CVE-2026-14976IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability
- CVE-2026-14981IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
- CVE-2026-14996Multiple vulnerabilities in IBM Aspera Faspex
- CVE-2026-15057IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability
- CVE-2026-15064IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
- CVE-2026-15280IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability
- CVE-2026-15325IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
- CVE-2026-15328IBM WebSphere Application Server and WebSphere Application Server Liberty is inconsistent Interpretation of HTTP Requests
- CVE-2026-16107TS4500 CLI tool addresses security vulnerability
- CVE-2026-16184IBM WebSphere Application Server is affected by an authentication bypass
- CVE-2026-16192IBM WebSphere Application Server Liberty is affected by a denial of service
- CVE-2026-1918IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file
- CVE-2026-3157Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI
- CVE-2026-3158Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure
- CVE-2026-4932This Power System update is being released to address Insufficient Entropy
- CVE-2026-7362Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
- CVE-2026-7769SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
- CVE-2026-7775Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
- CVE-2026-7868This Power System update is being released to address incorrect authorization