IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-8855IBM HTTP Server is affected by multiple vulnerabilities
- CVE-2026-8854IBM HTTP Server is affected by multiple vulnerabilities
- CVE-2026-8856IBM HTTP Server is affected by multiple vulnerabilities
- CVE-2026-8852IBM HTTP Server is affected by multiple vulnerabilities
- CVE-2026-8850IBM HTTP Server is affected by multiple vulnerabilities
- CVE-2025-36221Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.
- CVE-2025-36220Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.
- CVE-2025-36126IBM Cognos Analytics is affected by Cross-site scripting.
- CVE-2025-36148IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting.
- CVE-2025-36145Multiple Vulnerabilities in watsonx.data
- CVE-2025-14290IBM webMethods Integration Sever is vulnerable to server-side request forgery
- CVE-2025-13755IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase buckets
- CVE-2026-1577IBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueries
- CVE-2025-36122IBM® Db2® is vulnerable to a denial of service with a specially crafted query when stmtheap is set to automatic
- CVE-2025-14688IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurations
- CVE-2026-2311IBM i is affected by a privilege escalation vulnerability in Web Administration GUI []
- CVE-2025-36180Inadequate Pod Communication Restrictions, affects watsonx.data
- CVE-2026-6389IBM Turbonomic Prometurbo agent used by IBM Turbonomic Application Resource Management is affected by a single vulnerability
- CVE-2026-6542Monitor API allows cross-user read of transaction logs and deletion of build data via flow_id
- CVE-2025-36335Vulnerabilities found
- CVE-2026-6543Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint
- CVE-2026-3345Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpoint
- CVE-2026-3346Stored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRaw
- CVE-2026-3340Server-Side Request Forgery (SSRF) in Langflow URL Component
- CVE-2026-4502Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API
- CVE-2026-4503Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint
- CVE-2026-1726Multiple Vulnerabilities in IBM Guardium Key Lifecycle Manager
- CVE-2025-36074Security vulnerability has been detected in IBM Security Verify Directory
- CVE-2026-5926Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-1352IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined index