IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-9610Multiple Vulnerabilities in IBM Datacap
- CVE-2026-9072WebSphere Application Server Remote Code Execution
- CVE-2026-8858WebSphere Application Server Remote Code Execution
- CVE-2026-8636Multiple Vulnerabilities in IBM Datacap
- CVE-2026-8059Multiple Vulnerabilities in IBM Datacap
- CVE-2026-7664Unauthenticated Flow Execution via Webhook Endpoint in Langflow OSS
- CVE-2026-11372IBM TRIRIGA Cross-Site Scripting Vulnerability
- CVE-2026-12628Hardcoded credential in the IBM Storage Protect Snapshot For Windows leads to unauthorized access to system
- CVE-2026-10561Unauthenticated Remote Code Execution in Langflow OSS PythonREPLComponent via Builtins Injection
- CVE-2025-33128IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities HTML / XSS Injection observed
- CVE-2025-2669Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.
- CVE-2024-54178Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.
- CVE-2026-4870Qiskit SDK is vulnerable to specific functions may recurse too deeply and overflow the available stack space, when encountering certain classical expressions.
- CVE-2024-45636IBM Security QRadar EDR Software has a vulnerability where user credentials may be stored in plain text, potentially exposing sensitive information.
- CVE-2026-3341IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection Allowing Access to Internal Services
- CVE-2026-4096A vulnerability has been identified in IBM DevOps Plan that allows a Host Header Injection attack due to improper handling of the Host header in HTTP requests.
- CVE-2026-7787Unauthenticated Session History Access via Public Flow Execution
- CVE-2026-7870IBM i is Affected by Privilege Escalation []
- CVE-2026-9330IBM WebSphere Application Server is affected by remote code execution
- CVE-2026-9319IBM WebSphere Application Server is affected by a remote code execution vulnerability
- CVE-2026-9311IBM WebSphere Application Server is affected by remote code execution
- CVE-2026-8644IBM WebSphere Application Server is affected by an identity spoofing vulnerability
- CVE-2026-7770IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator
- CVE-2026-1248IBM Business Automation Workflow information leak
- CVE-2026-7876Authentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for Integration
- CVE-2026-7365IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation
- CVE-2024-56462IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
- CVE-2024-40684IBM Operations Analytics - Log Analysis is affected by Weak Password Policy and Inadequate Account Lockout Mechanism
- CVE-2024-28765Security vulnerability was found in IBM Security Directory Integrator
- CVE-2026-9035Multiple vulnerabilities in Aspera applications.