IBM
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any IBM product.
RSS Feeds for IBM security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in IBM products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by IBM Sorted by Most Security Vulnerabilities since 2018
Known Exploited IBM Vulnerabilities
The following IBM vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.
| Title | Description | Added |
|---|---|---|
| IBM Langflow Code Injection Vulnerability |
Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. CVE-2026-9198 |
August 4, 2026 |
| IBM Aspera Faspex Code Execution Vulnerability |
IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw. CVE-2022-47986 Exploit Probability: 100.0% |
February 21, 2023 |
| IBM InfoSphere BigInsights Invalid Input Vulnerability |
Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data. CVE-2013-3993 Exploit Probability: 4.8% |
May 25, 2022 |
| IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. |
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands CVE-2015-7450 Exploit Probability: 97.8% |
January 10, 2022 |
| IBM Data Risk Manager Arbritary File Download |
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535. CVE-2020-4430 Exploit Probability: 68.5% |
November 3, 2021 |
| IBM Data Risk Manager Authentication Bypass |
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532. CVE-2020-4427 Exploit Probability: 70.0% |
November 3, 2021 |
| IBM Data Risk Manager Command Injection |
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533. CVE-2020-4428 Exploit Probability: 61.7% |
November 3, 2021 |
| IBM Planning Analytics configuration overwrite vulnerability |
IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094. CVE-2019-4716 Exploit Probability: 86.4% |
November 3, 2021 |
Of the known exploited vulnerabilities above, 6 are in the top 1%, or the 99th percentile of the EPSS exploit probability rankings.
By the Year
In 2026 there have been 1819 vulnerabilities in IBM with an average score of 7.1 out of ten. Last year, in 2025 IBM had 563 security vulnerabilities published. That is, 1256 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.81.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1819 | 7.06 |
| 2025 | 563 | 6.26 |
| 2024 | 503 | 6.44 |
| 2023 | 357 | 6.80 |
| 2022 | 327 | 6.36 |
| 2021 | 443 | 6.10 |
| 2020 | 353 | 6.19 |
| 2019 | 454 | 6.14 |
| 2018 | 451 | 6.24 |
It may take a day or so for new IBM vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent IBM Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2026-118904 | Nov 08, 2026 |
IBM webMethods Integration Server 12.1 Auth BypassIBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication. |
Webmethods Integration Server
|
| CVE-2026-96146 | Nov 08, 2026 |
IBM SevOne NPM 7.0.0-8.2.2 DoS via uncontrolled resource consumptionIBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. |
Sevone Network Performance Management
|
| CVE-2026-95867 | Nov 08, 2026 |
SevOne NPM 7.0.0-8.2.2 Buffer Overflow RCEIBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow. |
Sevone Network Performance Management
|
| CVE-2026-17427 | Nov 08, 2026 |
IBM Power Systems Firmware (FW1060.x/OP9xx) DoS via Input Length ValidationIBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length. |
Openbmc
Power Hardware Management Console
|
| CVE-2026-17426 | Nov 08, 2026 |
IBM Power Systems Firmware FW1060.00-1060.81 DOS via Unhandled ExceptionIBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception. |
Openbmc
|
| CVE-2026-16697 | Nov 08, 2026 |
IBM Power Systems Firmware FW1060.00-81 DoS (CVE-2026-16697)IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources. |
Openbmc
Power Hardware Management Console
|
| CVE-2026-16682 | Nov 08, 2026 |
IBM Power Systems Firmware DoS via Uninit Resource (FW1060FW1120)IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper handling of uninitialized resources. |
Openbmc
Hardware Management Console
|
| CVE-2026-97677 | Nov 08, 2026 |
IBM Langflow OSS 1.0.0-1.12.2 Authenticated File Write/Read BypassIBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file content into any directory writable by the service account, bypassing the platform's local file access isolation safeguard. Via a crafted on-disk index, the attacker could also read the contents of arbitrary files accessible to the service process including configuration files, secrets, or database files stored under the application's data directory. |
Langflow Oss
|
| CVE-2026-9764 | Nov 08, 2026 |
IBM Bob 1.0.4-2.0.1 RCE via Improper Input ValidationIBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code. |
Bob
|
| CVE-2026-93879 | Nov 08, 2026 |
Hibernate Validator EL Injection DoS (CVE-2026-93879)Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language (EL) expressions. |
Hibernate Validator
|
| CVE-2026-93005 | Nov 08, 2026 |
IBM Process Mining 2.0.0-2.2.1 DoS via Email Notification Rate LimitingIBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated attacker to cause a denial of service through insufficient rate limiting of email notifications, resulting in excessive emails being sent to targeted recipients. |
Process Mining
|
| CVE-2026-8860 | Nov 08, 2026 |
IBM Verify Directory <=10.0.4,11.0.0 GET auth credentials exposureIBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parameters. This causes passwords to be exposed in browser history and server logs. |
Security Verify Directory
Verify Directory
|
| CVE-2026-8642 | Nov 08, 2026 |
IBM Security Verify Directory 10.0.0-10.0.4, 11.0.0 Debug Info DisclosureIBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 exposes debug endpoints that disclose system information including server versions and session identifiers. This information can be used to identify vulnerable software versions. |
Security Verify Directory
Verify Directory
|
| CVE-2026-8640 | Nov 08, 2026 |
IBM Verify Directory 10.0.010.0.4, 11.0.0: CSRF (Missing SameSite)IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 does not set the SameSite attribute on session cookies, making it vulnerable to Cross-Site Request Forgery (CSRF) attacks. An attacker can cause authenticated users' browsers to send unauthorized requests to the application. |
Security Verify Directory
Verify Directory
|
| CVE-2026-8639 | Nov 08, 2026 |
IBM Verify Directory <=10.0.4 & 11.0.0 Session FixationIBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 is vulnerable to session fixation. An attacker can establish a session and, after the victim authenticates, hijack the authenticated session to gain unauthorized access to the directory management console. |
Security Verify Directory
Verify Directory
|
| CVE-2026-84237 | Nov 08, 2026 |
IBM Guardium Data Protection 12.2.4 Path Traversal Info DisclosureIBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory. |
Guardium Data Protection
|
| CVE-2026-84229 | Nov 08, 2026 |
IBM Guardium Data Protection 12.2.4 CSRF Bypass via GETIBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests. |
Guardium Data Protection
|
| CVE-2026-84228 | Nov 08, 2026 |
IBM Guardium DP 12.2.4 Auth Remote Info Disclosure (Input Validation)IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation. |
Guardium Data Protection
|
| CVE-2026-84030 | Nov 08, 2026 |
IBM Guardium Data Protection 12.2.x SQLi Remote ExecIBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command. |
Guardium Data Protection
|
| CVE-2026-82830 | Nov 08, 2026 |
IBM Guardium Data Protection 12.2.4 Remote Auth Command InjectionIBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of argument delimiters. |
Guardium Data Protection
|
| CVE-2026-81542 | Nov 08, 2026 |
IBM DataStage on Cloud Pak for Data 5.4.0.0 Path Traversal File DeletionIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to delete arbitrary files due to path traversal. |
Datastage On Cloud Pak Data
|
| CVE-2026-81209 | Nov 08, 2026 |
IBM Sterling B2B Integrator/File Gateway 6.2.1.0-6.2.2.1_1 info leak via logIBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials. |
Sterling B2b Integrator
Sterling File Gateway
|
| CVE-2026-80435 | Nov 08, 2026 |
IBM DataStage on Cloud Pak for Data 5.4.0.0 XXE InjectionIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw. |
Datastage On Cloud Pak Data
|
| CVE-2026-78636 | Nov 08, 2026 |
IBM WebSphere Liberty 17.0.0.3-26.0.0.10 Info Disclosure via JMX REST ParserIBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure vulnerability due to unsafe class reflection in the JMX REST connector body parser. |
Websphere Application Server Liberty
|
| CVE-2026-78537 | Nov 08, 2026 |
IBM Guardium Key Lifecycle Manager 4.1-5.1 Weak Crypto Info LeakIBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 could allow a local attacker to obtain sensitive information due to the use of a weak cryptographic algorithm. |
Guardium Key Lifecycle Manager
|
| CVE-2026-77153 | Nov 08, 2026 |
IBM i 7.3-7.6 Host-Based Printer Subsystem Auth Bypass & Info LeakIBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to obtain sensitive information from the Host-Based Printer Subsystem due to no authorization check. A bad actor could use this vulnerability to print files they should not be able to access. |
I
|
| CVE-2026-75879 | Nov 08, 2026 |
IBM Content Navigator <=3.2.0.0 LDAP Injection (auth)IBM Content Navigator 3.0.15.0, 26.0.0.0, 3.1.0.0, and 3.2.0.0 is vulnerable to LDAP injection. A remote authenticated attacker could send a specially crafted request that could allow enumeration of LDAP directory information. |
Content Navigator
|
| CVE-2026-6715 | Nov 08, 2026 |
IBM Concert <=3.0.1.1 OS Command Injection (CVE-2026-6715)IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating system command without adequate validation or sanitization. Successful exploitation allows remote attackers to execute arbitrary commands on the underlying operating system with the privileges of the affected service. |
Concert
|
| CVE-2026-3684 | Nov 08, 2026 |
IBM Cloud Pak for Data System 11.3.1.2 IF001-002: Arbitrary File Read/WriteIBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001 through - 11.3.1.2 Interim Fix 002 could allow a user with administrative privileges to read and write arbitrary files on the system due to incorrect permission assignments. |
Cloud Pak For Data System
|
| CVE-2026-2700 | Nov 08, 2026 |
IBM watsonx Orchestrate Cartridge (CP4D) <=5.4.2 RBAC Bypass via APIIBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 allows low-privileged users to execute administrative functions by directly invoking backend APIs.As a result, UI-level access restrictions are ineffective, as the backend fails to enforce role-based access control. |
Watsonx Orchestrate Cartridge Cloud Pak Data
|
| CVE-2026-2477 | Nov 08, 2026 |
IBM watsonx Orchestrate Cartridge for CPD auth bypass (4.8.44.8.5,5.0.05.4.2)IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 fails to enforce backend authorization checks, allowing lowprivileged users to directly invoke administrative API endpoints. This bypasses UIlevel access restrictions and may lead to unauthorized execution of privileged functions. |
Watsonx Orchestrate Cartridge Cloud Pak Data
|
| CVE-2026-19307 | Nov 08, 2026 |
IBM Sterling B2B Integrator & File Gateway 6.2.16.2.2 AuthZ BypassIBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1 Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to improper authorization. |
Sterling B2b Integrator
Sterling File Gateway
|
| CVE-2026-19133 | Nov 08, 2026 |
IBM TS4500 Library 1.1.1.61.12.0.3 AuthZ Bypass Account TakeoverIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization. |
Storage Ts4500 Library
|
| CVE-2026-18893 | Nov 08, 2026 |
IBM CockroachDB PostgreSQL VPC PrivEsc via UDF (26.2.3, 25.4.12, 25.2.20)IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to privilege escalation via user-defined function. |
Cockroachdb Postgresql Ibm Vpc
|
| CVE-2026-18546 | Nov 08, 2026 |
IBM CockroachDB PostgreSQL SSRF in 25.2.0-25.2.20, 25.4.0-25.4.12, 26.2.0-26.2.3IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. |
Cockroachdb Postgresql Ibm Vpc
|
| CVE-2026-18668 | Nov 08, 2026 |
IBM Sterling File Gateway 6.2.1.x/6.2.2.x Protocol Downgrade via MisconfigIBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 - 6.2.2.1_1 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration. |
Sterling File Gateway
|
| CVE-2026-18525 | Nov 08, 2026 |
IBM Secure Proxy 6.1.0.0-6.2.1.2 DoS via listener IP/port validationIBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port. |
Secure Proxy
|
| CVE-2026-18484 | Nov 08, 2026 |
IBM ContextForge MCP Gateway 1.0.0-1.0.11 Auth DoS (slug normalization)IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper slug normalization causing tool name collisions. |
Contextforge Mcp Gateway
|
| CVE-2026-18196 | Nov 08, 2026 |
IBM ACE 13.0.1.0-13.0.8.2 & 12.0.1.0-12.0.12.30 Reflected HTML InjectionIBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to inject arbitrary HTML due to improper output neutralization. |
App Connect Enterprise
|
| CVE-2026-18195 | Nov 08, 2026 |
IBM App Connect Enterprise 12.x/13.x Content Spoofing via Error EncodingIBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to perform content spoofing due to improper output encoding of error messages. |
App Connect Enterprise
|
| CVE-2026-18194 | Nov 08, 2026 |
IBM App Connect Enterprise <13.0.9 Remote Clickjacking BypassIBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to perform unauthorized actions due to missing anti-clickjacking controls. |
App Connect Enterprise
|
| CVE-2026-18093 | Nov 08, 2026 |
IBM App Connect Enterprise 13.0.1.013.0.8.2 Access Control BypassIBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to broken access control. |
App Connect Enterprise
|
| CVE-2026-17466 | Nov 08, 2026 |
IBM Optim <=1.2 Path Traversal (Auth) Sensitive Info LeakIBM Optim 1.0.0, 1.1.0, and 1.2.0 could allow a remote authenticated attacker to obtain sensitive information due to path traversal. |
Optim
|
| CVE-2026-17437 | Nov 08, 2026 |
IBM App Connect Enterprise <=13.0.8.2, <=12.0.12.29 Path Traversal File WriteIBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.29 could allow a local attacker to perform an arbitrary file write due to improper validation of pathnames during archive extraction. |
App Connect Enterprise
|
| CVE-2026-16699 | Nov 08, 2026 |
IBM Netezza Appliance 11.3.0.2 IF00211.3.1.3 IF006 Auth Bypass (Pwd Change)IBM Netezza Appliance 11.3.0.2 Interim Fix 002 through 11.3.1.3 Interim Fix 006 could allow a remote authenticated attacker to change the passwords of other users due to improper authorization. |
Netezza Appliance
|
| CVE-2026-16433 | Nov 08, 2026 |
IBM DataStage (Cloud Pak for Data) 5.4.0.0 Path Traversal File WriteIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to write arbitrary files due to a path traversal vulnerability. |
Datastage On Cloud Pak Data
|
| CVE-2026-16427 | Nov 08, 2026 |
IBM DataStage on Cloud Pak for Data 5.4 Path Traversal File WriteIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to write arbitrary files due to a path traversal vulnerability. |
Datastage On Cloud Pak Data
|
| CVE-2026-16325 | Nov 08, 2026 |
IBM DataStage on Cloud Pak for Data 5.4.0.0 X-Forwarded-Host Header RCEIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary scripts due to improper neutralization of input in the X-Forwarded-Host header. |
Datastage On Cloud Pak Data
|
| CVE-2026-15266 | Nov 08, 2026 |
IBM Concert 3.0.1.1 Command Injection (RCE)IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host. |
Concert
|
| CVE-2026-14963 | Nov 08, 2026 |
CVE-2026-14963: IBM Cognos Command Center 10.2.5 CSRF Remote ExecIBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to execute unauthorized processes due to cross-site request forgery. |
Cognos Command Center
|