IBM
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any IBM product.
RSS Feeds for IBM security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in IBM products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by IBM Sorted by Most Security Vulnerabilities since 2018
Known Exploited IBM Vulnerabilities
The following IBM vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.
| Title | Description | Added |
|---|---|---|
| IBM Langflow Code Injection Vulnerability |
Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. CVE-2026-9198 |
August 4, 2026 |
| IBM Aspera Faspex Code Execution Vulnerability |
IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw. CVE-2022-47986 Exploit Probability: 100.0% |
February 21, 2023 |
| IBM InfoSphere BigInsights Invalid Input Vulnerability |
Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data. CVE-2013-3993 Exploit Probability: 4.8% |
May 25, 2022 |
| IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. |
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands CVE-2015-7450 Exploit Probability: 97.8% |
January 10, 2022 |
| IBM Data Risk Manager Arbritary File Download |
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535. CVE-2020-4430 Exploit Probability: 68.5% |
November 3, 2021 |
| IBM Data Risk Manager Authentication Bypass |
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532. CVE-2020-4427 Exploit Probability: 70.0% |
November 3, 2021 |
| IBM Data Risk Manager Command Injection |
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533. CVE-2020-4428 Exploit Probability: 61.7% |
November 3, 2021 |
| IBM Planning Analytics configuration overwrite vulnerability |
IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094. CVE-2019-4716 Exploit Probability: 86.4% |
November 3, 2021 |
Of the known exploited vulnerabilities above, 6 are in the top 1%, or the 99th percentile of the EPSS exploit probability rankings.
By the Year
In 2026 there have been 1350 vulnerabilities in IBM with an average score of 7.1 out of ten. Last year, in 2025 IBM had 563 security vulnerabilities published. That is, 787 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.83.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1350 | 7.08 |
| 2025 | 563 | 6.26 |
| 2024 | 503 | 6.44 |
| 2023 | 357 | 6.80 |
| 2022 | 327 | 6.36 |
| 2021 | 443 | 6.10 |
| 2020 | 353 | 6.19 |
| 2019 | 454 | 6.14 |
| 2018 | 451 | 6.24 |
It may take a day or so for new IBM vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent IBM Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2026-75875 | Oct 08, 2026 |
IBM Guardium Data Protection <12.3 RCE via Path TraversalIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal. |
Guardium Data Protection
|
| CVE-2026-80381 | Oct 08, 2026 |
IBM Guardium DP 12.0-12.2 SQL Injection Remote ExecutionIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection. |
Guardium Data Protection
|
| CVE-2026-82895 | Oct 08, 2026 |
IBM Guardium DP 12.x Remote Code Exec via Buffer OverflowIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
Guardium Data Protection
|
| CVE-2026-82900 | Oct 08, 2026 |
IBM Guardium DP 12.2.2 Remote File Delete via Path TraversalIBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory. |
Guardium Data Protection
|
| CVE-2026-81932 | Oct 08, 2026 |
SQLi in IBM Guardium Data Protection 12.0-12.2IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database. |
Guardium Data Protection
|
| CVE-2026-84032 | Oct 08, 2026 |
IBM Guardium Data Protect 12.2.2 MITM via Erroneous Cert ValidationIBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation. |
Guardium Data Protection
|
| CVE-2026-84035 | Oct 08, 2026 |
IBM Guardium Data Protection 12.x Stack Buffer Overflow RCEIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow. |
Guardium Data Protection
|
| CVE-2026-84057 | Oct 08, 2026 |
IBM Guardium DP 12.1/12.2.2 RCE via OS Command InjectionIBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. |
Guardium Data Protection
|
| CVE-2026-84058 | Oct 08, 2026 |
IBM Guardium 12.x Collector: TDS PRELOGIN Buffer Overrun (DoS/Code)IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance. |
Guardium Data Protection
|
| CVE-2026-84198 | Oct 08, 2026 |
IBM Guardium Data Protect 12.0-12.2 Remote Code Exec via Buffer OverflowIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
Guardium Data Protection
|
| CVE-2026-84209 | Oct 08, 2026 |
IBM Guardium Data Protection 12.2.2 SQL Injection Remote Code ExecutionIBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command. |
Guardium Data Protection
|
| CVE-2026-84230 | Oct 08, 2026 |
IBM Guardium Data Protection 12.2.2 DoS via Race Condition in Shared MapIBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map. |
Guardium Data Protection
|
| CVE-2026-84246 | Oct 08, 2026 |
Remote Code Exec via Buffer Overflow in IBM Guardium DP <12.3IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
Guardium Data Protection
|
| CVE-2026-84247 | Oct 08, 2026 |
IBM Guardium Data Protection 12.2 Path Traversal DoS VulnerabilityIBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. |
Guardium Data Protection
|
| CVE-2026-84249 | Oct 08, 2026 |
IBM Guardium 12.2/12.2.2 - Missing Auth Allows Remote OpsIBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function. |
Guardium Data Protection
|
| CVE-2026-84875 | Oct 08, 2026 |
IBM Guardium Data Protection 12.x RCE via Buffer OverflowIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
Guardium Data Protection
|
| CVE-2026-84891 | Oct 08, 2026 |
IBM Guardium Data Protection 12.x Hard-Coded Credentials Remote Info DisclosureIBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials. |
Guardium Data Protection
|
| CVE-2026-87980 | Oct 08, 2026 |
Local Log Data Leakage in IBM Guardium Data Protection 12.2IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs. |
Guardium Data Protection
|
| CVE-2026-11888 | Oct 08, 2026 |
IBM Security Verify Access 10.0-10.0.9.2 Info DisclosureIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to an information disclosure attack. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-11930 | Oct 08, 2026 |
IBM Security Verify Access 10.0-10.0.9.2 Auth BypassIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce authorization correctly for some web servers. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-11939 | Oct 08, 2026 |
Audit Log Forgery IBM Verify Access 10.0-10.0.9.2 & Verify Identity Access 11.0-11.0.3IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to audit log forgery. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-16823 | Oct 08, 2026 |
IBM Verify Access 10.0-10.0.9.2 / 11.0-11.0.3 Auth BypassIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass security restrictions due to improper authentication. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-16830 | Oct 08, 2026 |
IBM Verify Access 10.0-10.0.9.2/11.0-11.0.3: Auth SQLi Data Mod/DoSIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-16916 | Oct 08, 2026 |
IBM Verify Access 10.010.0.9.2 Remote Auth Affected by Protection FailureIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary code due to a protection mechanism failure. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-17189 | Oct 08, 2026 |
IBM Verify Access 10.0-10.0.9.2 / Verify Identity Access 11.0-11.0.3 XSSIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-18740 | Oct 08, 2026 |
IBM Verify Access 10.0-10.0.9.2 / Identity Access 11.0-11.0.3 Arg InjectionIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to perform unauthorized actions due to argument injection. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-19491 | Oct 08, 2026 |
IBM Security Verify Access 10.0-10.0.9.2/11.0-11.0.3 Auth BypassIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due to improper authentication. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-19494 | Oct 08, 2026 |
IBM Verify Access 10.0-10.0.9.2 and 11.0-11.0.3: Rmt Auth Bypass Improper AuthIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-19498 | Oct 08, 2026 |
IBM Verify Access 10.0-10.0.9.2/ID Access 11.0-11.0.3 DoS via recursionIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service due to uncontrolled recursion. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-19493 | Oct 08, 2026 |
Arbitrary File Write in IBM Verify Access <10.0.9.2 / Identity Access <11.0.3IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due to path traversal. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-19482 | Oct 08, 2026 |
Arbitrary Command Execution in IBM Verify Access 10.0-10.0.9.2, 11.0-11.0.3IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of command arguments. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-78399 | Oct 08, 2026 |
IBM Verify Access 10.0-10.0.9.2 & 11.0-11.0.3 DoS via HTTP QueryIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-78388 | Oct 08, 2026 |
CSRF in IBM Verify Access 10.010.0.9.2 & Verify IA 11.011.0.3IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-78401 | Oct 08, 2026 |
IBM Verify Access RCE via Deserialization 10.0-10.0.9.2 & 11.0-11.0.3IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-78406 | Oct 08, 2026 |
IBM Verify Access RCE via Untrusted Deserialization (<=10.0.9.2/<=11.0.3)IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-19878 | Oct 08, 2026 |
IBM Verify Identity Access 11.0.3 Auth Bypass via Auth WorkflowIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass additional authentication workflow steps. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-12091 | Oct 08, 2026 |
IBM Verify Access/Identity Access DoS via Heap OOB Read (10.0-10.0.9.2, 11.0-11.0.3)IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited outofbounds memory read. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-11936 | Oct 08, 2026 |
IBM Security Verify Access/Identity Access 10.0-11.0.3 Local mgmt XSSIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-12109 | Oct 08, 2026 |
IBM Verify Access 10.0-10.0.9.2 & 11.0-11.0.3: Stack Buffer Write Enables ExecIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-78407 | Oct 08, 2026 |
IBM Verify Access XSS: v10.010.0.9.2, v11.011.0.3IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. |
Security Verify Access
Verify Identity Access
Security Verify Access Container
And others... |
| CVE-2026-82334 | Oct 08, 2026 |
IBM Guardium Data Protection 12.x Heap OOB Read in TDS7 LOGIN7 ParserIBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of service. |
Guardium Data Protection
|
| CVE-2026-82335 | Oct 08, 2026 |
IBM Guardium Data Protect 12.x Heap Overflow via MongoDB SCRAM AuthIBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code execution. |
Guardium Data Protection
|
| CVE-2026-82344 | Oct 08, 2026 |
IBM Guardium Data Protection 12.x Heap Buffer Overflow in STAP TDS LoginIBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary code execution on the affected system. |
Guardium Data Protection
|
| CVE-2026-84244 | Oct 08, 2026 |
IBM Guardium Data Protection 12.2 XSS in Quick Search Grid (Stored)IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated Guardium user. |
Guardium Data Protection
|
| CVE-2026-84245 | Oct 08, 2026 |
IBM Guardium DP 12.2 LPE via cp_wrapperIBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files. |
Guardium Data Protection
|
| CVE-2026-84250 | Oct 08, 2026 |
IBM Guardium Data Protection 12.2 Weak Crypto pkcrypto passkeyIBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges. |
Guardium Data Protection
|
| CVE-2026-84271 | Oct 08, 2026 |
IBM Guardium DP 12.2 Signature Verification Bypass in Patch InstallerIBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges. |
Guardium Data Protection
|
| CVE-2026-84272 | Oct 08, 2026 |
IBM Guardium DP 12.1/12.2.2 Edge-Controller Auth Bypass: Container ExecIBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters. |
Guardium Data Protection
|
| CVE-2026-84274 | Oct 08, 2026 |
IBM Guardium 12.2.2 SII via INFO Logging in edge-controllerIBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the relevant application or container logs could obtain these credentials and use them to impersonate services or gain unauthorized access to the Guardium control plane. |
Guardium Data Protection
|
| CVE-2026-84275 | Oct 08, 2026 |
IBM Guardium Data Protection 12.2 Path Traversal in GIM File-UploadIBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector. |
Guardium Data Protection
|