[ Vendor · 330 CVEs ]
IBM
CVEs affecting IBM published in the last 30 days, plus any IBM CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-19627 | 12 Oct 2026 | CVSS 8.2 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to… | Fix |
| CVE-2026-17475 | 12 Oct 2026 | CVSS 7.1 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to… | Fix |
| CVE-2026-18541 | 12 Oct 2026 | CVSS 5.4 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary… | Fix |
| CVE-2026-19620 | 12 Oct 2026 | CVSS 8.8 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication. | Fix |
| CVE-2026-102627 | 12 Oct 2026 | CVSS 8.8 | IBM TRIRIGA Application PlatformIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation… | |
| CVE-2026-90911 | 12 Oct 2026 | CVSS 7.5 | IBM Maximo AI ServiceIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. | |
| CVE-2026-90912 | 12 Oct 2026 | CVSS 7.5 | IBM Maximo AI ServiceIBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion. | |
| CVE-2026-90920 | 12 Oct 2026 | CVSS 9.8 | IBM Maximo AI ServiceIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation. | |
| CVE-2026-90921 | 12 Oct 2026 | CVSS 7.5 | IBM Maximo AI ServiceIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames… | |
| CVE-2026-92876 | 12 Oct 2026 | CVSS 7.5 | IBM Maximo Application Suite - IoT ComponentIBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled… | |
| CVE-2026-96264 | 12 Oct 2026 | CVSS 8.2 | IBM PowerVM HypervisorIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with… | |
| CVE-2026-96265 | 12 Oct 2026 | CVSS 8.2 | IBM PowerVM HypervisorIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with… | |
| CVE-2026-96266 | 12 Oct 2026 | CVSS 8.2 | IBM PowerVM HypervisorIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with… | |
| CVE-2026-96261 | 12 Oct 2026 | CVSS 7.3 | IBM PowerVM HypervisorIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with… | |
| CVE-2026-96262 | 12 Oct 2026 | CVSS 8.2 | IBM PowerVM HypervisorIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with… | |
| CVE-2026-96263 | 12 Oct 2026 | CVSS 8.2 | IBM PowerVM HypervisorIBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability… | |
| CVE-2026-75881 | 12 Oct 2026 | CVSS 7.5 | IBM Maximo Application Suite - IoT ComponentIBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite… | |
| CVE-2026-78673 | 12 Oct 2026 | CVSS 7.5 | IBM Maximo AI ServiceIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation. | |
| CVE-2026-18513 | 12 Oct 2026 | CVSS 7.2 | IBM Maximo Application Suite - Location Service for Esri ComponentIBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less… | |
| CVE-2026-18517 | 12 Oct 2026 | CVSS 7.7 | IBM Maximo Application Suite - Location Service for Esri ComponentIBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri… | |
| CVE-2026-18529 | 12 Oct 2026 | CVSS 8.7 | IBM Maximo Application Suite - Location Service for Esri ComponentIBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation… | |
| CVE-2026-18533 | 12 Oct 2026 | CVSS 6.5 | IBM Maximo Application Suite - Location Service for Esri ComponentIBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised… | |
| CVE-2026-18537 | 12 Oct 2026 | CVSS 8.7 | IBM Maximo Application Suite - Location Service for Esri ComponentIBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised… | |
| CVE-2026-16678 | 12 Oct 2026 | CVSS 4.5 | IBM Virtualization Management InterfaceIBM Power Systems Firmware FW1110.00 through FW1110.31, FW1120.00 through FW1120.01, and FW1060.00 through FW1060.81 could allow a remote… | |
| CVE-2026-105052 | 12 Oct 2026 | CVSS 7.5 | IBM Maximo Application SuiteIBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the system. An attacker could… | |
| CVE-2026-96012 | 12 Oct 2026 | CVSS 9.9 | IBM Db2 Mirror for iIBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses… | |
| CVE-2026-104332 | 12 Oct 2026 | CVSS 5.5 | IBM Db2IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a… | |
| CVE-2026-104364 | 12 Oct 2026 | CVSS 3.3 | IBM Db2IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation. | |
| CVE-2025-27896 | 12 Oct 2026 | CVSS 6.1 | IBM DB2 Recovery Expert for Linux, UNIX and WindowsIBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated… | |
| CVE-2025-27897 | 12 Oct 2026 | CVSS 6.1 | IBM DB2 Recovery Expert for Linux, UNIX and WindowsIBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated… | |
| CVE-2025-27902 | 12 Oct 2026 | CVSS 6.1 | IBM DB2 Recovery Expert for Linux, UNIX and WindowsIBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could… | |
| CVE-2025-27895 | 12 Oct 2026 | CVSS 6.1 | IBM DB2 Recovery Expert for Linux, UNIX and WindowsIBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated… | |
| CVE-2026-78404 | 12 Oct 2026 | CVSS 6.5 | IBM Db2IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility. | |
| CVE-2026-18166 | 12 Oct 2026 | CVSS 7.7 | IBM Db2IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated… | |
| CVE-2026-105464 | 12 Oct 2026 | CVSS 8.8 | IBM Db2IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to… | |
| CVE-2026-105465 | 12 Oct 2026 | CVSS 8.8 | IBM Db2IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance. | |
| CVE-2026-105466 | 12 Oct 2026 | CVSS 6.5 | IBM Db2IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under… | |
| CVE-2026-87980 | 8 Oct 2026 | CVSS 5.5 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive… | Fix |
| CVE-2026-84249 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication… | |
| CVE-2026-84875 | 8 Oct 2026 | CVSS 8.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. | Fix |
| CVE-2026-84891 | 8 Oct 2026 | CVSS 7.5 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials. | |
| CVE-2026-84035 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow. | Fix |
| CVE-2026-84057 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special… | |
| CVE-2026-84058 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A… | Fix |
| CVE-2026-84198 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. | Fix |
| CVE-2026-84209 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of… | |
| CVE-2026-84230 | 8 Oct 2026 | CVSS 5.9 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent… | Fix |
| CVE-2026-84246 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. | Fix |
| CVE-2026-84247 | 8 Oct 2026 | CVSS 6.5 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. | Fix |
| CVE-2026-75875 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal. | |
| CVE-2026-80381 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection. | Fix |
| CVE-2026-81932 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL… | Fix |
| CVE-2026-82895 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. | Fix |
| CVE-2026-82900 | 8 Oct 2026 | CVSS 9.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a… | |
| CVE-2026-84032 | 8 Oct 2026 | CVSS 8.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation. | Fix |
| CVE-2026-78401 | 8 Oct 2026 | CVSS 9.8 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to… | |
| CVE-2026-78406 | 8 Oct 2026 | CVSS 9.8 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to… | |
| CVE-2026-78407 | 8 Oct 2026 | CVSS 5.4 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This… | |
| CVE-2026-78388 | 8 Oct 2026 | CVSS 8.8 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which… | |
| CVE-2026-78399 | 8 Oct 2026 | CVSS 6.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a… | |
| CVE-2026-19491 | 8 Oct 2026 | CVSS 7.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass… | |
| CVE-2026-19493 | 8 Oct 2026 | CVSS 7.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an… | |
| CVE-2026-19494 | 8 Oct 2026 | CVSS 6.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to… | |
| CVE-2026-19498 | 8 Oct 2026 | CVSS 7.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial… | |
| CVE-2026-19878 | 8 Oct 2026 | CVSS 6.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to… | |
| CVE-2026-16823 | 8 Oct 2026 | CVSS 7.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass security… | |
| CVE-2026-16830 | 8 Oct 2026 | CVSS 5.4 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to… | |
| CVE-2026-16916 | 8 Oct 2026 | CVSS 8.8 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to… | |
| CVE-2026-17189 | 8 Oct 2026 | CVSS 6.1 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This… | |
| CVE-2026-18740 | 8 Oct 2026 | CVSS 8.8 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to… | |
| CVE-2026-19482 | 8 Oct 2026 | CVSS 8.8 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to… | |
| CVE-2026-12109 | 8 Oct 2026 | CVSS 7.2 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative… | |
| CVE-2026-11888 | 8 Oct 2026 | CVSS 7.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to an information disclosure attack. | |
| CVE-2026-11930 | 8 Oct 2026 | CVSS 7.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce authorization correctly for some… | |
| CVE-2026-11936 | 8 Oct 2026 | CVSS 5.4 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain… | |
| CVE-2026-11939 | 8 Oct 2026 | CVSS 5.3 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to audit log forgery. | |
| CVE-2026-12091 | 8 Oct 2026 | CVSS 5.3 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a… | |
| CVE-2026-84275 | 8 Oct 2026 | CVSS 7.5 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit… | |
| CVE-2026-82344 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An… | |
| CVE-2026-84244 | 8 Oct 2026 | CVSS 6.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search… | |
| CVE-2026-84245 | 8 Oct 2026 | CVSS 7.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could… | |
| CVE-2026-84250 | 8 Oct 2026 | CVSS 7.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component… | |
| CVE-2026-84271 | 8 Oct 2026 | CVSS 7.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could… | |
| CVE-2026-84272 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote… | |
| CVE-2026-84274 | 8 Oct 2026 | CVSS 6.5 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing… | |
| CVE-2026-82334 | 8 Oct 2026 | CVSS 9.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker… | |
| CVE-2026-82335 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could… | |
| CVE-2026-84276 | 8 Oct 2026 | CVSS 7.5 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with… | |
| CVE-2026-84278 | 8 Oct 2026 | CVSS 7.2 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated… | |
| CVE-2026-84290 | 8 Oct 2026 | CVSS 5.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver… | |
| CVE-2026-14992 | 8 Oct 2026 | CVSS 9.8 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 vulnerable to… | |
| CVE-2026-14999 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-14497 | 8 Oct 2026 | CVSS 8.1 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-14502 | 8 Oct 2026 | CVSS 9.8 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-14507 | 8 Oct 2026 | CVSS 7.7 | IBM DataPower Gateway 11.0.0IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory… | |
| CVE-2026-14508 | 8 Oct 2026 | CVSS 9.1 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-14509 | 8 Oct 2026 | CVSS 5.9 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-14888 | 8 Oct 2026 | CVSS 9.8 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-14905 | 8 Oct 2026 | CVSS 8.2 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to… | |
| CVE-2026-14988 | 8 Oct 2026 | CVSS 9.8 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to… |
Page 2 of 4