[ Vendor · 330 CVEs ]
IBM
CVEs affecting IBM published in the last 30 days, plus any IBM CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-13257 | 8 Oct 2026 | CVSS 6.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an… | |
| CVE-2026-13258 | 8 Oct 2026 | CVSS 5.4 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to… | |
| CVE-2026-14269 | 8 Oct 2026 | CVSS 9.8 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a… | |
| CVE-2026-14273 | 8 Oct 2026 | CVSS 6.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-14496 | 8 Oct 2026 | CVSS 8.2 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-16161 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-16163 | 8 Oct 2026 | CVSS 8.6 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-16164 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-16165 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-16167 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-15781 | 8 Oct 2026 | CVSS 8.0 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-15784 | 8 Oct 2026 | CVSS 8.1 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-15819 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-15822 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-15824 | 8 Oct 2026 | CVSS 8.2 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-16111 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an… | |
| CVE-2026-16159 | 8 Oct 2026 | CVSS 8.6 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-14990 | 8 Oct 2026 | CVSS 9.3 | IBM DataPower Gateway 10.6.0IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed… | |
| CVE-2026-14991 | 8 Oct 2026 | CVSS 9.8 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a… | |
| CVE-2026-15762 | 8 Oct 2026 | CVSS 9.8 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-16178 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-16179 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an… | |
| CVE-2026-16181 | 8 Oct 2026 | CVSS 7.4 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-16182 | 8 Oct 2026 | CVSS 5.9 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2… | |
| CVE-2026-16340 | 8 Oct 2026 | CVSS 9.8 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-14521 | 8 Oct 2026 | CVSS 4.9 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to… | |
| CVE-2026-16169 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 11.0.0IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. | |
| CVE-2026-16170 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-16176 | 8 Oct 2026 | CVSS 7.5 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-16177 | 8 Oct 2026 | CVSS 5.3 | IBM DataPower Gateway 10.6CDIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a… | |
| CVE-2026-97673 | 7 Oct 2026 | CVSS 8.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation. | |
| CVE-2026-97674 | 7 Oct 2026 | CVSS 8.1 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of… | |
| CVE-2026-97676 | 7 Oct 2026 | CVSS 8.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special… | |
| CVE-2026-97678 | 7 Oct 2026 | CVSS 8.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation. | |
| CVE-2026-97679 | 7 Oct 2026 | CVSS 8.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special… | |
| CVE-2026-97680 | 7 Oct 2026 | CVSS 8.3 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to… | |
| CVE-2026-93449 | 7 Oct 2026 | CVSS 8.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code… | |
| CVE-2026-93674 | 7 Oct 2026 | CVSS 9.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used… | |
| CVE-2026-93675 | 7 Oct 2026 | CVSS 9.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion. | |
| CVE-2026-93677 | 7 Oct 2026 | CVSS 6.5 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to exposure of sensitive… | |
| CVE-2026-93678 | 7 Oct 2026 | CVSS 7.6 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. | |
| CVE-2026-93679 | 7 Oct 2026 | CVSS 4.3 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource… | |
| CVE-2026-97655 | 7 Oct 2026 | CVSS 8.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security… | |
| CVE-2026-97671 | 7 Oct 2026 | CVSS 6.5 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal… | |
| CVE-2026-103360 | 7 Oct 2026 | CVSS 6.5 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a… | |
| CVE-2026-104334 | 7 Oct 2026 | CVSS 9.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation. | |
| CVE-2026-88962 | 7 Oct 2026 | CVSS 8.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code… | |
| CVE-2026-93443 | 7 Oct 2026 | CVSS 8.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special… | |
| CVE-2026-93445 | 7 Oct 2026 | CVSS 8.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of… | |
| CVE-2026-93447 | 7 Oct 2026 | CVSS 7.5 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious… | |
| CVE-2026-93448 | 7 Oct 2026 | CVSS 6.5 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a… | |
| CVE-2026-101331 | 7 Oct 2026 | CVSS 6.5 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected… | |
| CVE-2026-101329 | 7 Oct 2026 | CVSS 6.5 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control. | |
| CVE-2026-104335 | 7 Oct 2026 | CVSS 8.8 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control. | |
| CVE-2026-84842 | 29 Sep 2026 | CVSS 8.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated… | Fix |
| CVE-2026-84414 | 29 Sep 2026 | CVSS 7.8 | IBM iIBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an… | |
| CVE-2026-84421 | 29 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths… | Fix |
| CVE-2026-84422 | 29 Sep 2026 | CVSS 7.2 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an… | Fix |
| CVE-2026-84436 | 29 Sep 2026 | CVSS 9.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated… | Fix |
| CVE-2026-84440 | 29 Sep 2026 | CVSS 8.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can… | Fix |
| CVE-2026-84862 | 25 Sep 2026 | CVSS 7.2 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could exploit… | |
| CVE-2026-84882 | 25 Sep 2026 | CVSS 6.5 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote… | |
| CVE-2026-93030 | 25 Sep 2026 | CVSS 6.5 | IBM Financial Transaction Manager (FTM) for Redhat OpenShiftFTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw. | |
| CVE-2026-93306 | 25 Sep 2026 | CVSS 7.1 | IBM Server FirmwareIBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected… | Fix |
| CVE-2026-85029 | 25 Sep 2026 | CVSS 8.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code… | |
| CVE-2026-85542 | 25 Sep 2026 | CVSS 8.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker… | |
| CVE-2026-84884 | 25 Sep 2026 | CVSS 8.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated… | |
| CVE-2026-84893 | 25 Sep 2026 | CVSS 6.5 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to… | |
| CVE-2026-81552 | 24 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization… | Fix |
| CVE-2026-82093 | 24 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserialization of… | Fix |
| CVE-2026-82094 | 24 Sep 2026 | CVSS 7.1 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to improper… | Fix |
| CVE-2026-81539 | 24 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of… | Fix |
| CVE-2026-81545 | 24 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization… | Fix |
| CVE-2026-81547 | 24 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to path traversal. | Fix |
| CVE-2026-81548 | 24 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization… | Fix |
| CVE-2026-81549 | 24 Sep 2026 | CVSS 7.7 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of… | Fix |
| CVE-2026-77825 | 24 Sep 2026 | CVSS 4.9 | IBM ContextForge MCP GatewayIBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`)… | Fix |
| CVE-2026-77874 | 24 Sep 2026 | CVSS 8.6 | IBM Enterprise Build of QuarkusIBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated… | |
| CVE-2026-6544 | 24 Sep 2026 | CVSS 6.2 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of… | |
| CVE-2026-18870 | 24 Sep 2026 | CVSS 4.3 | IBM PowerVM HypervisorIBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could… | Fix |
| CVE-2026-19492 | 24 Sep 2026 | CVSS 3.2 | IBM PowerVM HypervisorIBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a… | Fix |
| CVE-2026-17503 | 24 Sep 2026 | CVSS 5.1 | IBM PowerVM HypervisorIBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is… | Fix |
| CVE-2026-17504 | 24 Sep 2026 | CVSS 4.4 | IBM PowerVM HypervisorIBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is… | Fix |
| CVE-2026-17511 | 24 Sep 2026 | CVSS 3.4 | IBM PowerVM HypervisorIBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is… | Fix |
| CVE-2026-18104 | 24 Sep 2026 | CVSS 3.3 | IBM Db2 Mirror for iIBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook… | Fix |
| CVE-2026-18857 | 24 Sep 2026 | CVSS 3.4 | IBM OPENBMCIBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC… | Fix |
| CVE-2026-17413 | 24 Sep 2026 | CVSS 5.1 | IBM PowerVM HypervisorIBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is… | Fix |
| CVE-2026-80423 | 23 Sep 2026 | CVSS 6.5 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of… | Fix |
| CVE-2026-81208 | 23 Sep 2026 | CVSS 7.7 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted… | Fix |
| CVE-2026-81536 | 23 Sep 2026 | CVSS 7.7 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity… | Fix |
| CVE-2026-81537 | 23 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection. | Fix |
| CVE-2026-80412 | 23 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of… | Fix |
| CVE-2026-80425 | 23 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization… | Fix |
| CVE-2026-6730 | 23 Sep 2026 | CVSS 7.8 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and… | |
| CVE-2026-6794 | 23 Sep 2026 | CVSS 7.8 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this… | |
| CVE-2026-6925 | 23 Sep 2026 | CVSS 5.3 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL… | |
| CVE-2026-6928 | 23 Sep 2026 | CVSS 9.8 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or… | Fix |
| CVE-2026-6935 | 23 Sep 2026 | CVSS 7.8 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path… | Fix |
| CVE-2026-80379 | 23 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization… | Fix |
| CVE-2026-6718 | 23 Sep 2026 | CVSS 6.2 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files. | Fix |
Page 3 of 4