CVE-2026-76587 HIGH 8.8 Planning Analytics — IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds … 2026-10-20 CVE-2026-81212 CRITICAL 10 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into … 2026-10-20 CVE-2026-82891 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due … 2026-10-20 CVE-2026-87800 MEDIUM 6.8 Cyber Fraud — IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due … 2026-10-20 CVE-2026-92559 CRITICAL 9.8 App Connect Enterprise — IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive informa… 2026-10-20 CVE-2026-93441 HIGH 8.6 Qradar Security Information And Event Management — IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consum… 2026-10-20 CVE-2026-93442 HIGH 8.2 Qradar — IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow… 2026-10-20 CVE-2026-93744 MEDIUM 6.5 I — IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due… 2026-10-20 CVE-2026-93888 HIGH 7.8 Sterling Connect Direct For Unix — IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is v… 2026-10-20 CVE-2026-94402 MEDIUM 6.1 @Carbon/Charts — IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Titl… 2026-10-20 CVE-2026-9825 LOW 3.7 Cyberfraud — IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitte… 2026-10-20 CVE-2026-105453 HIGH 8.4 Sterling Connect Direct For Unix — IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local a… 2026-10-19 CVE-2026-107366 HIGH 8.3 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification.… 2026-10-19 CVE-2026-107400 HIGH 8.8 Tririga Application Platform — IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute ar… 2026-10-19 CVE-2026-109126 HIGH 8.8 Verify Identity Access — IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically… 2026-10-19 CVE-2026-10572 HIGH 8.8 Mq Operator — IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod… 2026-10-19 CVE-2026-10574 HIGH 8.8 Mq Operator — IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod… 2026-10-19 CVE-2026-10743 HIGH 8.8 Mq Operator — IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper va… 2026-10-19 CVE-2026-11828 MEDIUM 5.9 Mq Operator — IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted cha… 2026-10-19 CVE-2026-11829 MEDIUM 6.5 Mq Operator — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset… 2026-10-19 CVE-2026-11831 MEDIUM 5.4 Mq Operator — IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited info… 2026-10-19 CVE-2026-12148 HIGH 7.5 Mq Operator — IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbi… 2026-10-19 CVE-2026-12155 MEDIUM 6.5 Mq Operator — IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multica… 2026-10-19 CVE-2026-12343 MEDIUM 6.5 Mq Operator — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 m… 2026-10-19 CVE-2026-12350 MEDIUM 6.5 Mq Operator — IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted async… 2026-10-19 CVE-2026-12660 LOW 2.7 Mq Operator — IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory du… 2026-10-19 CVE-2026-12665 HIGH 8.1 Mq Operator — IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing … 2026-10-19 CVE-2026-12669 LOW 3.1 Mq Operator — IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed comp… 2026-10-19 CVE-2026-12670 MEDIUM 5.3 Mq Operator — IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message … 2026-10-19 CVE-2026-12727 MEDIUM 4.3 Mq Operator — IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffe… 2026-10-19 CVE-2026-14511 MEDIUM 6.5 Mq — IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a spe… 2026-10-19 CVE-2026-15661 MEDIUM 5.3 Concert — IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to imprope… 2026-10-19 CVE-2026-19178 MEDIUM 6.8 Storage Ts4500 Library — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauth… 2026-10-19 CVE-2026-1501 LOW 3.7 Concert — IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. 2026-10-19 CVE-2026-1510 MEDIUM 4.7 Concert — IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection. 2026-10-19 CVE-2026-3161 MEDIUM 5.9 Cloud Pak System — IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow … 2026-10-19 CVE-2026-3295 HIGH 7.4 Cloud Pak System — IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied inp… 2026-10-19 CVE-2026-3303 LOW 3.7 Concert — IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry… 2026-10-19 CVE-2026-3628 MEDIUM 5.3 Concert — IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions. 2026-10-19 CVE-2026-4405 MEDIUM 4 Concert — IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on … 2026-10-19 CVE-2026-4413 MEDIUM 6.1 Concert — IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthentica… 2026-10-19 CVE-2026-4418 MEDIUM 5.4 Cloud Pak System — IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker c… 2026-10-19 CVE-2026-6719 HIGH 7.5 Concert — IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker … 2026-10-19 CVE-2026-6930 LOW 3.7 Concert — IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker … 2026-10-19 CVE-2026-8355 MEDIUM 5.4 Contextforge Mcp Gateway — IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that al… 2026-10-19 CVE-2025-36061 MEDIUM 6.5 Storage Ts4500 Library — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Librar… 2026-10-19 CVE-2025-36069 MEDIUM 5.5 Storage Ts4500 Library — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could all… 2026-10-19 CVE-2025-36252 MEDIUM 6.3 Storage Ts4500 Library — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not … 2026-10-19 CVE-2026-102917 HIGH 7.8 I — IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor… 2026-10-16 CVE-2026-107674 MEDIUM 5.1 I — IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for Sys… 2026-10-16 CVE-2026-109838 MEDIUM 5.1 Db2 Genius Hub — IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verificati… 2026-10-16 CVE-2026-109839 LOW 3.1 Db2 Genius Hub — IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a mi… 2026-10-16 CVE-2026-17068 MEDIUM 5.4 I — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper e… 2026-10-16 CVE-2026-17073 MEDIUM 5.4 I — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtr… 2026-10-16 CVE-2026-17275 LOW 3.7 I — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed… 2026-10-16 CVE-2026-17488 MEDIUM 4.3 I — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due t… 2026-10-16 CVE-2026-17491 MEDIUM 5.4 I — IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions du… 2026-10-16 CVE-2026-101294 HIGH 8.7 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5… 2026-10-13 CVE-2026-103499 HIGH 7.5 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5… 2026-10-13 CVE-2026-105442 HIGH 7.5 Websphere Application Server — IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through … 2026-10-13 CVE-2026-105443 HIGH 8.2 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between serve… 2026-10-13 CVE-2026-11713 MEDIUM 5.4 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vul… 2026-10-13 CVE-2026-14532 MEDIUM 4.3 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obt… 2026-10-13 CVE-2026-14909 MEDIUM 6.5 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure … 2026-10-13 CVE-2026-53709 CRITICAL 9.8 Mcp Context Forge — MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env… 2026-10-13 CVE-2026-53711 MEDIUM 5.1 Mcp Context Forge — MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global …● PoC 2026-10-13 CVE-2026-77816 MEDIUM 6.5 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-… 2026-10-13 CVE-2026-79715 MEDIUM 5.5 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse … 2026-10-13 CVE-2026-93895 CRITICAL 9.1 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote a… 2026-10-13 CVE-2026-93905 HIGH 8.2 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote at… 2026-10-13 CVE-2026-93907 HIGH 8.1 Websphere Application Server — IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploi… 2026-10-13 CVE-2026-93909 CRITICAL 9.1 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypas… 2026-10-13 CVE-2026-95680 HIGH 8 Websphere Application Server — IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization le… 2026-10-13 CVE-2026-95695 HIGH 7.4 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass… 2026-10-13 CVE-2026-95696 MEDIUM 6.5 Websphere Application Server Liberty — IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause … 2026-10-13 CVE-2026-102627 HIGH 8.8 Tririga Application Platform — IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute ar… 2026-10-12 CVE-2026-104332 MEDIUM 5.5 Db2 — IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a… 2026-10-12 CVE-2026-104364 LOW 3.3 Db2 — IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of ser… 2026-10-12 CVE-2026-105052 HIGH 7.5 Maximo Application Suite — IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directori… 2026-10-12 CVE-2026-105464 HIGH 8.8 Db2 — IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Ser… 2026-10-12 CVE-2026-105465 HIGH 8.8 Db2 — IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh … 2026-10-12 CVE-2026-105466 MEDIUM 6.5 Db2 — IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting i… 2026-10-12 CVE-2026-16678 MEDIUM 4.5 Virtualization Management Interface — IBM Power Systems Firmware FW1110.00 through FW1110.31, FW1120.00 through FW1120.01, and FW1060.00 through FW1… 2026-10-12 CVE-2026-17475 HIGH 7.1 Planning Analytics — IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applicat… 2026-10-12 CVE-2026-17484 MEDIUM 5.3 I — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access … 2026-10-12 CVE-2026-17487 MEDIUM 5.3 I — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of dis… 2026-10-12 CVE-2026-18166 HIGH 7.7 Db2 — IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Ser… 2026-10-12 CVE-2026-18318 MEDIUM 5.3 I — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credential… 2026-10-12 CVE-2026-18343 MEDIUM 4.4 I — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorizat… 2026-10-12 CVE-2026-18513 HIGH 7.2 Maximo Application Suite Location Service For Esri Component — IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper… 2026-10-12 CVE-2026-18517 HIGH 7.7 Maximo Application Suite Location Service For Esri Component — IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Su… 2026-10-12 CVE-2026-18529 HIGH 8.7 Maximo Application Suite Location Service For Esri Component — IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command … 2026-10-12 CVE-2026-18533 MEDIUM 6.5 Maximo Application Suite Location Service For Esri Component — IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper… 2026-10-12 CVE-2026-18537 HIGH 8.7 Maximo Application Suite Location Service For Esri Component — IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper… 2026-10-12 CVE-2026-18541 MEDIUM 6.4 Planning Analytics — IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an… 2026-10-12 CVE-2026-19620 HIGH 8.8 Planning Analytics — IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access d… 2026-10-12 CVE-2026-19622 HIGH 8.8 Planning Analytics — IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privil… 2026-10-12 CVE-2026-19627 HIGH 8.2 Planning Analytics — IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite c… 2026-10-12 CVE-2026-75061 HIGH 7.5 Planning Analytics — IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An at… 2026-10-12 CVE-2026-75063 MEDIUM 5.4 Planning Analytics — IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScrip… 2026-10-12 CVE-2026-75076 MEDIUM 4.3 Aspera Enterprise Webapps — IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive informatio… 2026-10-12 CVE-2026-75095 HIGH 7.5 Aspera Enterprise Webapps — IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service d… 2026-10-12 CVE-2026-75621 MEDIUM 6.2 Aspera Enterprise Webapps — IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information… 2026-10-12 CVE-2026-75782 HIGH 7.8 Aspera Enterprise Webapps — IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due… 2026-10-12 CVE-2026-75881 HIGH 7.5 Maximo Application Suite Iot Component — IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a … 2026-10-12 CVE-2026-78404 MEDIUM 6.5 Db2 — IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the… 2026-10-12 CVE-2026-78673 HIGH 7.5 Maximo Ai Service — IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to impro… 2026-10-12 CVE-2026-81858 MEDIUM 5.4 I — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obta… 2026-10-12 CVE-2026-82096 HIGH 8.8 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c… 2026-10-12 CVE-2026-82101 CRITICAL 9.6 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of s… 2026-10-12 CVE-2026-82103 CRITICAL 9.6 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive in… 2026-10-12 CVE-2026-82108 HIGH 8.8 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c… 2026-10-12 CVE-2026-82110 CRITICAL 9.6 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c… 2026-10-12 CVE-2026-84418 HIGH 7.4 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS cer… 2026-10-12 CVE-2026-85457 HIGH 8.1 Planning Analytics — IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due … 2026-10-12 CVE-2026-90911 HIGH 7.5 Maximo Ai Service — IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncon… 2026-10-12 CVE-2026-90912 HIGH 7.5 Maximo Ai Service — IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to … 2026-10-12 CVE-2026-90920 CRITICAL 9.8 Maximo Ai Service — IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper… 2026-10-12 CVE-2026-90921 HIGH 7.5 Maximo Ai Service — IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to impro… 2026-10-12 CVE-2026-92832 MEDIUM 5.1 Aspera Enterprise Webapps — IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information… 2026-10-12 CVE-2026-92876 HIGH 7.5 Maximo Application Suite Iot Component — IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a … 2026-10-12 CVE-2026-93886 HIGH 8.3 I — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due … 2026-10-12 CVE-2026-93891 HIGH 7.6 Tririga Application Platform — IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sen… 2026-10-12 CVE-2026-93892 HIGH 8.1 Tririga Application Platform — IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sen… 2026-10-12 CVE-2026-96012 CRITICAL 9.9 Db2 Mirror For I — IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could … 2026-10-12 CVE-2026-96119 CRITICAL 9.9 I — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or ex… 2026-10-12 CVE-2026-96261 HIGH 7.3 Powervm Hypervisor — IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configu… 2026-10-12 CVE-2026-96262 HIGH 8.2 Powervm Hypervisor — IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor… 2026-10-12 CVE-2026-96263 HIGH 8.2 Powervm Hypervisor — IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1… 2026-10-12 CVE-2026-96264 HIGH 8.2 Powervm Hypervisor — IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processo… 2026-10-12 CVE-2026-96265 HIGH 8.2 Powervm Hypervisor — IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor… 2026-10-12 CVE-2026-96266 HIGH 8.2 Powervm Hypervisor — IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configu… 2026-10-12 CVE-2025-27895 MEDIUM 6.1 Db2 Recovery Expert For Linux, Unix And Windows — IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulne… 2026-10-12 CVE-2025-27896 MEDIUM 6.1 Db2 Recovery Expert For Linux, Unix And Windows — IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulne… 2026-10-12 CVE-2025-27897 MEDIUM 6.1 Db2 Recovery Expert For Linux, Unix And Windows — IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulne… 2026-10-12 CVE-2025-27902 MEDIUM 6.1 Db2 Recovery Expert For Linux, Unix And Windows — IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an e… 2026-10-12 CVE-2026-11888 MEDIUM 6.4 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnera… 2026-10-08 CVE-2026-11930 MEDIUM 5.9 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not en… 2026-10-08 CVE-2026-11936 MEDIUM 4.9 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local mana… 2026-10-08 CVE-2026-11939 LOW 2.7 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vul… 2026-10-08 CVE-2026-12091 LOW 3.7 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-12109 MEDIUM 5.5 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-13257 MEDIUM 6.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-13258 MEDIUM 5.4 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14269 CRITICAL 9.8 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14273 MEDIUM 6.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14496 HIGH 8.2 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14497 HIGH 8.1 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14502 CRITICAL 9.8 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14507 HIGH 7.7 Datapower Gateway 11.0.0 — IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial … 2026-10-08 CVE-2026-14508 MEDIUM 6.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14509 MEDIUM 5.9 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14521 MEDIUM 4.9 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14888 HIGH 8.1 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14905 HIGH 8.2 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14988 MEDIUM 6.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14990 CRITICAL 9.3 Datapower Gateway 10.6.0 — IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability all… 2026-10-08 CVE-2026-14991 CRITICAL 9.8 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14992 CRITICAL 9.8 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-14999 HIGH 7.4 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-15762 CRITICAL 9.8 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-15781 HIGH 8 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-15784 HIGH 8.1 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-15819 HIGH 7.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-15822 HIGH 7.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-15824 HIGH 8.2 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16111 HIGH 7.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16159 HIGH 8.6 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16161 HIGH 7.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16163 HIGH 8.6 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16164 HIGH 7.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16165 HIGH 7.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16167 HIGH 7.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16169 HIGH 7.5 Datapower Gateway 11.0.0 — IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due… 2026-10-08 CVE-2026-16170 HIGH 7.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16176 HIGH 7.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16177 MEDIUM 5.3 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16178 HIGH 7.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16179 HIGH 7.5 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16181 HIGH 7.4 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16182 MEDIUM 5.9 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.… 2026-10-08 CVE-2026-16340 CRITICAL 9.8 Datapower Gateway 10.6cd — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.… 2026-10-08 CVE-2026-16823 CRITICAL 9.1 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-16830 MEDIUM 5.4 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-16916 CRITICAL 9.1 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-17189 HIGH 8.2 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnera… 2026-10-08 CVE-2026-18740 HIGH 8.8 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-19482 HIGH 8.8 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-19491 CRITICAL 9.1 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-19493 HIGH 7.5 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-19494 HIGH 8.1 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-19498 MEDIUM 5.9 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-19878 MEDIUM 6.5 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-75875 CRITICAL 9.8 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due … 2026-10-08 CVE-2026-78388 MEDIUM 4.3 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnera… 2026-10-08 CVE-2026-78399 MEDIUM 6.5 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-78401 CRITICAL 9.8 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-78406 CRITICAL 9.8 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allo… 2026-10-08 CVE-2026-78407 MEDIUM 5.4 Security Verify Access — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulner… 2026-10-08 CVE-2026-80381 CRITICAL 9.8 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL st… 2026-10-08 CVE-2026-81932 HIGH 8.6 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated att… 2026-10-08 CVE-2026-82334 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOG… 2026-10-08 CVE-2026-82335 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB pro… 2026-10-08 CVE-2026-82344 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap … 2026-10-08 CVE-2026-82895 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due … 2026-10-08 CVE-2026-82900 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to i… 2026-10-08 CVE-2026-84032 MEDIUM 5.6 Guardium Data Protection — IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to… 2026-10-08 CVE-2026-84035 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due … 2026-10-08 CVE-2026-84057 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due … 2026-10-08 CVE-2026-84058 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL … 2026-10-08 CVE-2026-84198 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due … 2026-10-08 CVE-2026-84209 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands … 2026-10-08 CVE-2026-84230 HIGH 7.5 Guardium Data Protection — IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race c… 2026-10-08 CVE-2026-84244 CRITICAL 9.3 Guardium Data Protection — IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scr… 2026-10-08 CVE-2026-84245 HIGH 7.8 Guardium Data Protection — IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A… 2026-10-08 CVE-2026-84246 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due … 2026-10-08 CVE-2026-84247 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due… 2026-10-08 CVE-2026-84249 CRITICAL 9.8 Guardium Data Protection — IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management op… 2026-10-08 CVE-2026-84250 HIGH 8.4 Guardium Data Protection — IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery… 2026-10-08 CVE-2026-84271 HIGH 7.8 Guardium Data Protection — IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An … 2026-10-08 CVE-2026-84272 CRITICAL 9.8 Guardium Data Protection — IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller c… 2026-10-08 CVE-2026-84274 MEDIUM 6.5 Guardium Data Protection — IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECR… 2026-10-08 CVE-2026-84275 HIGH 7.5 Guardium Data Protection — IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An una… 2026-10-08 CVE-2026-84276 HIGH 7.5 Guardium Data Protection — IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. A… 2026-10-08 CVE-2026-84278 HIGH 7.2 Guardium Data Protection — IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config… 2026-10-08 CVE-2026-84290 MEDIUM 5.1 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers … 2026-10-08 CVE-2026-84875 HIGH 7.5 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due … 2026-10-08 CVE-2026-84891 MEDIUM 5.9 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive informatio… 2026-10-08 CVE-2026-87980 LOW 3.1 Guardium Data Protection — IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information… 2026-10-08 CVE-2026-88962 HIGH 8.8 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code du… 2026-10-07 CVE-2026-93443 HIGH 7.5 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code du… 2026-10-07 CVE-2026-93445 HIGH 8.1 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code du… 2026-10-07 CVE-2026-93447 HIGH 7.5 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write… 2026-10-07 CVE-2026-93448 MEDIUM 6.5 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive informat… 2026-10-07 CVE-2026-93449 HIGH 8.5 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code du… 2026-10-07 CVE-2026-93674 CRITICAL 9.8 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper …● PoC 2026-10-07 CVE-2026-93675 HIGH 8.8 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expect… 2026-10-07 CVE-2026-93677 HIGH 7.7 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive informat… 2026-10-07 CVE-2026-93678 HIGH 7.6 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive informat… 2026-10-07 CVE-2026-93679 MEDIUM 4.3 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service… 2026-10-07 CVE-2026-97671 MEDIUM 6.5 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive informat… 2026-10-07 CVE-2026-97673 HIGH 8.8 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code du… 2026-10-07 CVE-2026-101329 MEDIUM 6.5 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive informat… 2026-10-06 CVE-2026-101331 HIGH 7.7 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive informat… 2026-10-06 CVE-2026-103360 HIGH 8.1 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive informat… 2026-10-06 CVE-2026-104334 CRITICAL 9.8 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper … 2026-10-06 CVE-2026-104335 HIGH 8.8 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code du… 2026-10-06 CVE-2026-97655 HIGH 8.8 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomp… 2026-10-06 CVE-2026-97674 HIGH 8.1 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS comm… 2026-10-06 CVE-2026-97676 HIGH 8.8 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code du… 2026-10-06 CVE-2026-97678 HIGH 8.8 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code du… 2026-10-06 CVE-2026-97679 HIGH 8.8 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code du… 2026-10-06 CVE-2026-97680 HIGH 8.3 Langflow Oss — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive informat… 2026-10-06 CVE-2026-84414 HIGH 7.8 I — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary f… 2026-09-29 CVE-2026-84421 HIGH 8.8 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c… 2026-09-29 CVE-2026-84422 HIGH 7.2 Guardium Data Protection — IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient de… 2026-09-29 CVE-2026-84436 CRITICAL 9.1 Guardium Data Protection — IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionali… 2026-09-29 CVE-2026-84440 HIGH 7.5 Guardium Data Protection — IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functional… 2026-09-29 CVE-2026-84842 HIGH 8.1 Guardium Data Protection — IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasourc… 2026-09-29 CVE-2026-84862 HIGH 7.2 Guardium Data Protection — IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An a… 2026-09-25 CVE-2026-84882 HIGH 7.5 Guardium Data Protection — IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upl… 2026-09-25 CVE-2026-84884 HIGH 7.5 Guardium Data Protection — IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equ… 2026-09-25 CVE-2026-84893 HIGH 7.6 Guardium Data Protection — IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacke… 2026-09-25 CVE-2026-85029 HIGH 7.5 Guardium Data Protection — IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitr… 2026-09-25 CVE-2026-85542 HIGH 8.8 Guardium Data Protection — IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import fu… 2026-09-25 CVE-2026-93030 MEDIUM 6.5 Ibm Financial Transaction Manager (Ftm) For Redhat Openshift — FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external… 2026-09-25 CVE-2026-93306 HIGH 7.1 Server Firmware — IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and… 2026-09-25 CVE-2026-17413 MEDIUM 5.1 Powervm Hypervisor — IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, … 2026-09-24 CVE-2026-17503 MEDIUM 5.1 Powervm Hypervisor — IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, … 2026-09-24 CVE-2026-17504 MEDIUM 5.1 Powervm Hypervisor — IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, … 2026-09-24 CVE-2026-17511 LOW 3.4 Powervm Hypervisor — IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, … 2026-09-24 CVE-2026-18104 LOW 3.3 Db2 Mirror For I — IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the… 2026-09-24 CVE-2026-18857 LOW 3.4 Openbmc — IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affec… 2026-09-24 CVE-2026-18870 MEDIUM 4.3 Powervm Hypervisor — IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, … 2026-09-24 CVE-2026-19492 LOW 3.2 Powervm Hypervisor — IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.… 2026-09-24 CVE-2026-6544 MEDIUM 6.2 Concert — IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead… 2026-09-24 CVE-2026-77825 MEDIUM 4.9 Contextforge Mcp Gateway — IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-downloa… 2026-09-24 CVE-2026-77874 HIGH 8.6 Enterprise Build Of Quarkus — IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL … 2026-09-24 CVE-2026-81539 HIGH 8.8 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c… 2026-09-24 CVE-2026-81545 HIGH 8.8 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c… 2026-09-24 CVE-2026-81547 HIGH 8.8 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c… 2026-09-24 CVE-2026-81548 HIGH 8.8 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c… 2026-09-24 CVE-2026-81549 CRITICAL 9.6 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive in… 2026-09-24 CVE-2026-81552 HIGH 8.8 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c… 2026-09-24 CVE-2026-82093 HIGH 8.8 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c… 2026-09-24 CVE-2026-82094 HIGH 7.1 Datastage On Cloud Pak For Data — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directorie… 2026-09-24 CVE-2026-18177 HIGH 7.1 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute unauthor… 2026-09-23 CVE-2026-18179 MEDIUM 6.5 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to clear active cha… 2026-09-23 CVE-2026-18180 MEDIUM 6.5 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to ob… 2026-09-23 CVE-2026-18181 HIGH 8.1 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentic… 2026-09-23 CVE-2026-18184 HIGH 7.4 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive… 2026-09-23 CVE-2026-18185 HIGH 7.3 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to access sensitive… 2026-09-23 CVE-2026-18490 HIGH 8.8 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code exec… 2026-09-23 CVE-2026-18505 MEDIUM 5.4 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to open redirect in the PMP `HostHe… 2026-09-23 CVE-2026-18872 CRITICAL 9.3 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE… 2026-09-23 CVE-2026-18875 HIGH 7.3 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticate… 2026-09-23 CVE-2026-19087 MEDIUM 4.4 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege… 2026-09-23 CVE-2026-19179 HIGH 8.2 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate datab… 2026-09-23 CVE-2026-19267 MEDIUM 6.2 Financial Transaction Manager (Ftm) For Redhat Openshift — IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Bu… 2026-09-23 CVE-2026-3626 MEDIUM 5.3 Concert — IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed … 2026-09-23