IBM
Vulnerability activity for IBM: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 27
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 2
Last 90 days
- CVEs
- 89
- Critical (CVSS 9+)
- 23
- Exploited (CISA KEV)
- 1
- With exploit code
- 3
Last 365 days
- CVEs
- 92
- Critical (CVSS 9+)
- 25
- Exploited (CISA KEV)
- 1
- With exploit code
- 5
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 9.8CriticalAug 4, 2026IBM Langflow Code / command injectionCVE-2026-9198Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.Added to KEV Aug 4, 2026Exploited29% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 9.8CriticalFeb 17, 2023IBM Aspera Faspex DeserializationCVE-2022-47986IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.Added to KEV Feb 21, 2023 · 3 days after publicationExploited100% likelyExploit codeExploit-DB · NucleiDetection
- 6.5MediumJul 7, 2014IBM InfoSphere BigInsights Privilege escalationCVE-2013-3993Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.Added to KEV May 25, 2022 · 2,879 days after publicationExploited4.8% likely
- 9.8CriticalJan 2, 2016IBM WebSphere Application Server and Server Hypervisor Edition Code / command injectionCVE-2015-7450Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commandsAdded to KEV Jan 10, 2022 · 2,199 days after publicationExploited98% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 10.0CriticalDec 18, 2019IBM Planning Analytics Code / command injectionCVE-2019-4716IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.Added to KEV Nov 3, 2021 · 685 days after publicationExploited86% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 9.1CriticalMay 7, 2020IBM Data Risk Manager Code / command injectionCVE-2020-4428IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�Added to KEV Nov 3, 2021 · 544 days after publicationExploited62% likelyExploit codeMetasploit
- 9.0CriticalMay 7, 2020IBM Data Risk Manager Auth bypass / access controlCVE-2020-4427IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.Added to KEV Nov 3, 2021 · 544 days after publicationExploited70% likelyExploit codeMetasploit · NucleiDetection
- 4.3MediumMay 7, 2020IBM Data Risk Manager Path traversal / file handlingCVE-2020-4430IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.Added to KEV Nov 3, 2021 · 544 days after publicationExploited69% likelyDetection
Recent
- 9.8CriticalOct 29, 2026IBM Langflow OSS Auth bypass / access controlCVE-2026-93680IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.Metasploit
- –UnscoredOct 26, 2026IBMADV-cccs-39ed3a23b6abSerial number: AV26-1082 Date: October 26, 2026 As of October 20, 2026, IBM is affected by vulnerabilities in the following products: IBM App Connect Enterprise Versions 13.0.1.0 to 13.0.8.2 IBM Guardium Data Protection Version 12.1 Version 12.2 Planning Analytics Version 2.0 Version 2.1 IBM QRadar Versions 7.5.0 to 7.5.0 Update Package 16 Interim Fix 001 Versions 7.6.0.0 to 7.6.0.4 IBM QRadar Security Information and Event Management Versions 7.4-20210823144546 to 7.5-20260930064858 Versions 7.
- 6.1MediumOct 20, 2026IBM @carbon/charts XSSCVE-2026-94402IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle() function re-inserts a substring of user-supplied label text into the DOM via an unsanitized innerHTML write when the title exceeds the available container width. A remote attacker could exploit this vulnerability to execute arbitrary JavaScript in the victim's browser session.
- 8.6HighOct 20, 2026IBM QRadar Security Information and Event Management Denial of serviceCVE-2026-93441IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
- 9.8CriticalOct 20, 2026IBM App Connect Enterprise Information disclosureCVE-2026-92559IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.
- 8.1HighOct 20, 2026IBM Guardium Data Protection Crypto / certificateCVE-2026-82891IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.
- 8.8HighOct 20, 2026IBM Planning Analytics Memory corruptionCVE-2026-76587IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.
- 10.0CriticalOct 20, 2026IBM DataStage on Cloud Pak for Data Auth bypass / access controlCVE-2026-81212IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller poison any tenant's cached flow parameters.
- –UnscoredOct 20, 2026IBMADV-cccs-a7c30b444e70Serial number: AV26-1064 Date: October 20, 2026 As of October 19, 2026, IBM is affected by vulnerabilities in the following products: IBM Concert Prior to or equal to 3.0.0 IBM MQ Advanced container images Multiple versions IBM MQ Operator Multiples versions IBM Sterling Connect Direct for Unix Prior to or equal to 6.3.0.7 Prior to or equal to 6.4.0.6 IBM i Versions 7.3, 7.4, 7.5 and 7.6 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary
- 6.3MediumOct 19, 2026IBM Storage TS4500 LibraryCVE-2025-36252IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.
- 5.5MediumOct 19, 2026IBM Storage TS4500 LibraryCVE-2025-36069IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
- 6.5MediumOct 19, 2026IBM Storage TS4500 Library Denial of serviceCVE-2025-36061IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.
- 6.5MediumOct 19, 2026Ibm mq Denial of serviceCVE-2026-14511IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications.
- 4.3MediumOct 19, 2026Ibm mq operator Memory corruptionCVE-2026-12727IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names.
- 5.3MediumOct 19, 2026Ibm mq operator Denial of serviceCVE-2026-12670IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion.
- 3.1LowOct 19, 2026Ibm mq operator Memory corruptionCVE-2026-12669IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected.
- 8.1HighOct 19, 2026Ibm mq operator Memory corruptionCVE-2026-12665IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment.
- 2.7LowOct 19, 2026Ibm mq operator Path traversal / file handlingCVE-2026-12660IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation.
- 6.5MediumOct 19, 2026Ibm mq operator DeserializationCVE-2026-12350IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that crashes the queue manager agent process.
- 6.5MediumOct 19, 2026Ibm mq operator Denial of serviceCVE-2026-12343IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations.
- 6.5MediumOct 19, 2026Ibm mq operator Memory corruptionCVE-2026-11829IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests.
- 5.9MediumOct 19, 2026Ibm mq operator Memory corruptionCVE-2026-11828IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.
- 8.8HighOct 19, 2026Ibm mq operator Denial of serviceCVE-2026-10743IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.
- 8.8HighOct 19, 2026Ibm mq operator Memory corruptionCVE-2026-10574IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties.
- 8.8HighOct 19, 2026Ibm mq operator Memory corruptionCVE-2026-10572IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with malformed message options.
- 7.5HighOct 13, 2026IBM WebSphere Application Server - Liberty Denial of serviceCVE-2026-103499IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.
- 9.8CriticalOct 7, 2026IBM Langflow OSS Code / command injectionCVE-2026-93674IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.6.2% likelyMetasploit · NucleiDetection
- 8.5HighSep 10, 2026IBM DataStage on Cloud Pak for Data SSRFCVE-2026-81207IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fetch originating from a shared-infrastructure pod, and the WSDL body is reflected verbatim to the caller. The ds-canvas pod sits on
- 9.6CriticalSep 10, 2026IBM DataStage on Cloud Pak for Data Auth bypass / access controlCVE-2026-82107IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authentication.
- 9.8CriticalAug 20, 2026Ibm vios Privilege escalationCVE-2026-17145IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management.
- 9.8CriticalAug 20, 2026Ibm vios Auth bypass / access controlCVE-2026-17142IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication.
- 9.8CriticalAug 20, 2026Ibm vios Memory corruptionCVE-2026-17141IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
- 8.1HighAug 20, 2026Ibm vios Memory corruptionCVE-2026-17138IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
- 9.8CriticalAug 20, 2026Ibm viosCVE-2026-17136IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a format string vulnerability.
- 7.8HighAug 20, 2026Ibm vios Memory corruptionCVE-2026-17124IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds read.
- 9.8CriticalAug 20, 2026Ibm vios Memory corruptionCVE-2026-17122IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
- 7.5HighAug 20, 2026Ibm vios Denial of serviceCVE-2026-17121IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
- 5.3MediumAug 20, 2026Ibm vios Memory corruptionCVE-2026-17120IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a buffer overflow.
- 9.8CriticalAug 20, 2026Ibm vios Memory corruptionCVE-2026-17118IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.
- 8.1HighAug 20, 2026Ibm vios Information disclosureCVE-2026-17060IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read.
- 9.8CriticalAug 20, 2026Ibm vios Memory corruptionCVE-2026-17040IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
- 7.7HighAug 20, 2026Ibm vios Crypto / certificateCVE-2026-17024IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation.
- 4.7MediumAug 20, 2026Ibm vios Memory corruptionCVE-2026-17009IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference.
- 6.7MediumAug 20, 2026Ibm vios Memory corruptionCVE-2026-17007IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.
- 8.3HighAug 20, 2026Ibm vios Memory corruptionCVE-2026-17006IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
- 7.7HighAug 20, 2026Ibm vios Memory corruptionCVE-2026-17003IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise the confidentiality and integrity of the system due to an out-of-bounds write.
- 8.1HighAug 20, 2026Ibm vios Auth bypass / access controlCVE-2026-17000IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper authentication.
- 7.8HighAug 20, 2026Ibm vios Privilege escalationCVE-2026-16997IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management.
- 8.8HighAug 20, 2026Ibm vios Memory corruptionCVE-2026-16996IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow.
- 7.8HighAug 20, 2026Ibm vios Privilege escalationCVE-2026-16991IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper handling of symbolic links.
Top products
- vios36 CVEs in the last year, 11 critical
- aix23 CVEs in the last year, 6 critical
- mq operator12 CVEs in the last year
- Langflow OSS4 CVEs in the last year, 4 critical
- Storage TS4500 Library3 CVEs in the last year
- DataStage on Cloud Pak for Data3 CVEs in the last year, 2 critical
- WebSphere Application Server - Liberty1 CVE in the last year
- security verify access1 CVE in the last year
- QRadar Security Information and Event Management1 CVE in the last year
- Planning Analytics1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CCCS (Canada) · Oct 26, 2026IBM security advisory (AV26-1082)ADV-cccs-39ed3a23b6ab
- CCCS (Canada) · Oct 20, 2026IBM security advisory (AV26-1064)ADV-cccs-a7c30b444e70
- CCCS (Canada) · Oct 14, 2026IBM security advisory (AV26-1040)CVE-2026-103499
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.