IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-8058This Power System update is being released to address a sensitive information disclosure
- CVE-2026-3482IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass
- CVE-2026-13445Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- CVE-2026-13446Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- CVE-2026-13448Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- CVE-2026-13473IBM Storage Protect Client is vulnerable to Heap-Based Buffer Overflow
- CVE-2026-14499Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- CVE-2026-14501Use of Potentially Dangerous Functionthat in IBM Db2 Genius Hub
- CVE-2026-14971This PowerVM Novalink update is being released to address
- CVE-2026-14979IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack
- CVE-2026-15069Multiple Vulnerabilities in IBM Engineering AI hub.
- CVE-2026-15091Multiple Vulnerabilities in IBM Engineering AI hub.
- CVE-2026-15093Multiple Vulnerabilities in IBM Engineering AI hub.
- CVE-2026-15322Multiple Vulnerabilities in IBM Engineering AI hub.
- CVE-2026-15995IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use
- CVE-2026-4938Incorrect Authorization in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-4942IBM i is Affected by Algorithm Downgrade in Transport Layer Security []
- CVE-2026-7364Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-7667Path Traversal Vulnerability in API Request Component Content-Disposition Header Processing
- CVE-2026-7754SSRF Protection Configuration Vulnerability
- CVE-2026-7755MCP Server Configuration Validator Bypass via File Upload API
- CVE-2026-7771IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service
- CVE-2026-7872Path Traversal Vulnerability in File Component Leading to Arbitrary File Read and Authentication Bypass
- CVE-2026-8056Parameter Injection Vulnerability in API Graph Execution Engine
- CVE-2026-8476Disk Cache Deserialization Remote Code Execution Vulnerability
- CVE-2026-8481Remote Code Execution via Code Validation Endpoint
- CVE-2026-8505Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow Execution
- CVE-2026-8635Arbitrary Code Execution in Python Interpreter Component
- CVE-2026-8859Path Traversal in APIRequest Component via Content-Disposition Header
- CVE-2026-8861Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access