IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-8405IBM Guardium Data Protection is affected by Exposure of Sensitive Information vulnerability
- CVE-2026-8180Multiple vulnerabilities in Aspera applications.
- CVE-2026-8179Multiple vulnerabilities in Aspera applications.
- CVE-2026-8175Multiple vulnerabilities in Aspera applications.
- CVE-2026-7528Unauthenticated File Upload Vulnerability Allows Disk Space Exhaustion and Path Disclosure in Langflow OSS
- CVE-2026-7524Path Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote Code Execution
- CVE-2026-7254Open BMC Denial of Service
- CVE-2026-6938IBM® Db2® is vulnerable to authorization bypass when uploading to a remote object storage path with a special query
- CVE-2026-6936IBM i is Affected by a Denial of Service Vulnerability []
- CVE-2026-6053IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables
- CVE-2026-6052IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables
- CVE-2026-6051IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap
- CVE-2026-5516IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability
- CVE-2026-5515IBM App Connect Enterprise is vulnerable to a confidential disclosure
- CVE-2026-5065IBM Controller is affected by vulnerabilities
- CVE-2026-4410IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
- CVE-2026-3676There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.
- CVE-2026-3623Vulnerabilities exists in IBM Netezza Performance Server Replication Services
- CVE-2026-3366InfoSphere Optim Test Data Fabrication is affected by Arbitrary File Read
- CVE-2026-2607Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
- CVE-2026-1718IBM® Db2® is vulnerable to a denial of service with a specially crafted query when running an AUTONOMOUS procedure
- CVE-2025-3633IBM Cognos Analytics is affected by multiple security vulnerabilities
- CVE-2026-3660IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass
- CVE-2026-3603IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack
- CVE-2026-4051IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution
- CVE-2026-9170IBM HTTP Server is affected by multiple vulnerabilities
- CVE-2026-8633IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins
- CVE-2026-8620IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins
- CVE-2026-8835IBM HTTP Server is affected by multiple vulnerabilities
- CVE-2026-8834IBM HTTP Server is affected by multiple vulnerabilities