en
IBM is a multinational technology company offering enterprise software, cloud, and integration platforms. It operates in analytics, data management, middleware, security, and AI-driven environments with a global footprint. The provided context centers on IBM software products and related vulnerability notes rather than hardware.
As of 11/08/2026, IBM recorded 1,028 security vulnerabilities in the last 90 days across 80 products, including 631 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, i had the most security vulnerabilities in the IBM ecosystem, with 153 vulnerabilities—approximately 14.88% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-97677Langflow OSS is affected by multiple vulnerabilitiesCVE-2026-9764IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server executionCVE-2026-96146Multiple vulnerabilities previously addressed in IBM SevOne Network Performance ManagementCVE-2026-95867Multiple vulnerabilities previously addressed in IBM SevOne Network Performance ManagementCVE-2026-93879Hibernate Validator is affected by an expression language injection vulnerability| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-97677Langflow OSS is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes |
| Published11/08/2026 |
| SeverityHigh |
CVE-2026-9764IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server execution | Exploitation statusNot confirmed | FixYes | Affected productBob Shell | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-96146Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management | Exploitation statusNot confirmed | FixYes | Affected productSevOne Network Performance Management | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-95867Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management | Exploitation statusNot exploited | FixYes | Affected productSevOne Network Performance Management | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-93879Hibernate Validator is affected by an expression language injection vulnerability | Exploitation statusNot confirmed | FixYes | Affected productHibernate Validator | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-93005Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026 | Exploitation statusNot confirmed | FixYes | Affected productProcess Mining | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-8860IBM Verify Directory is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productSecurity Verify Directory | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-8642IBM Verify Directory is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productSecurity Verify Directory | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-8640IBM Verify Directory is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productSecurity Verify Directory | Published11/08/2026 | SeverityLow |
|---|
CVE-2026-8639IBM Verify Directory is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productSecurity Verify Directory | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-84237IBM Guardium Data Protection is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productGuardium Data Protection | Published11/08/2026 | SeverityLow |
|---|
CVE-2026-84229IBM Guardium Data Protection is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productGuardium Data Protection | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-84228IBM Guardium Data Protection is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productGuardium Data Protection | Published11/08/2026 | SeverityLow |
|---|
CVE-2026-84030IBM Guardium Data Protection is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productGuardium Data Protection | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-82830IBM Guardium Data Protection is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productGuardium Data Protection | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-81542DataStage on Cloud Pak for Data has several vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productDataStage on Cloud Pak for Data | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-81209Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File Gateway | Exploitation statusNot confirmed | FixYes | Affected productSterling B2B Integrator | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-80435DataStage on Cloud Pak for Data has several vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productDataStage on Cloud Pak for Data | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-78636IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productWebSphere Application Server - Liberty | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-78537IBM Guardium Key Lifecycle Manager is affected by a security vulnerability | Exploitation statusNot confirmed | FixYes | Affected productGuardium Key Lifecycle Manager | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-77153IBM i is Affected By Missing Authorization Vulnerability in Host-Based Printer Subsystem [] | Exploitation statusNot confirmed | FixYes | Affected producti | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-76052The following vulnerabilities that can affect IBM Storage Scale and IBM Storage Scale System and the Management GUI are now fixed in 5.2.3.9/6.2.3.7 or higher and 6.0.1.1/7.0.1.1 or higher | Exploitation statusNot confirmed | FixYes | Affected productStorage Scale | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-75879Multiple vulnerabilities in IBM Content Navigator and FasterXML jackson-databind in IBM Content Navigator | Exploitation statusNot confirmed | FixYes | Affected productContent Navigator | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-6715Multiple Vulnerabilities in IBM Concert Software | Exploitation statusNot confirmed | FixYes | Affected productConcert | Published11/08/2026 | SeverityCritical |
|---|
CVE-2026-3684Vulnerabilities exists in IBM Cloud Pak for Data System | Exploitation statusNot confirmed | FixYes | Affected productCloud Pak for Data System | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-2700Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge | Exploitation statusNot confirmed | FixYes | Affected productwatsonx Orchestrate Cartridge for Cloud Pak for Data | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-2477Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge | Exploitation statusNot confirmed | FixYes | Affected productwatsonx Orchestrate Cartridge for Cloud Pak for Data | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-19307Improper Authorization vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File Gateway | Exploitation statusNot confirmed | FixYes | Affected productSterling B2B Integrator | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-19133TS4500 Tape Library addresses security vulnerability | Exploitation statusNot confirmed | FixYes | Affected productStorage TS4500 Library | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-18893CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productCockroachDB PostgreSQL for IBM VPC | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-18668Protection Mechanism Failure vulnerability affects IBM Sterling File Gateway | Exploitation statusNot confirmed | FixYes | Affected productSterling File Gateway | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-18546CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productCockroachDB PostgreSQL for IBM VPC | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-18525IBM Sterling Secure Proxy is vulnerable to multiple issues | Exploitation statusNot confirmed | FixYes | Affected productSecure Proxy | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-18484IBM ContextForge MCP Gateway is affected by a denial-of-service via tool name collision through slug normalization | Exploitation statusNot confirmed | FixYes | Affected productContextForge MCP Gateway | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-18196IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection | Exploitation statusNot confirmed | FixYes | Affected productApp Connect Enterprise | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-18195IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection | Exploitation statusNot confirmed | FixYes | Affected productApp Connect Enterprise | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-18194IBM App Connect Enterprise is vulnerable to a clickjacking attack | Exploitation statusNot confirmed | FixYes | Affected productApp Connect Enterprise | Published11/08/2026 | SeverityLow |
|---|
CVE-2026-18093IBM App Connect Enterprise is vulnerable to a credential exposure | Exploitation statusNot confirmed | FixYes | Affected productApp Connect Enterprise | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-17466IBM Optim Test Data Management 1.0.0, 1.1.0, and 1.2.0 impacted by Path Traversal, Rate Limiting, and Weak Password Policy vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productOptim | Published11/08/2026 | SeverityCritical |
|---|
CVE-2026-17437IBM App Connect Enterprise is vulnerable to an arbitrary file write | Exploitation statusNot confirmed | FixYes | Affected productApp Connect Enterprise | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-17427This Power System update is being released to address | Exploitation statusNot confirmed | FixYes | Affected productOPENBMC | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-17426This Power System update is being released to address | Exploitation statusNot confirmed | FixYes | Affected productOPENBMC | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-16699Vulnerability exists in IBM Netezza Appliance | Exploitation statusNot confirmed | FixYes | Affected productNetezza Appliance | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-16697This Power System update is being released to address | Exploitation statusNot confirmed | FixYes | Affected productOPENBMC | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-16682This Power System update is being released to address | Exploitation statusNot confirmed | FixYes | Affected productHardware Management Console | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-16433DataStage on Cloud Pak for Data has several vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productDataStage on Cloud Pak for Data | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-16427DataStage on Cloud Pak for Data has several vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productDataStage on Cloud Pak for Data | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-16325DataStage on Cloud Pak for Data has several vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productDataStage on Cloud Pak for Data | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-15266Multiple Vulnerabilities in IBM Concert Software | Exploitation statusNot confirmed | FixYes | Affected productConcert | Published11/08/2026 | SeverityCritical |
|---|
CVE-2026-14963IBM Cognos Command Center has addressed vulnerabilities | Exploitation statusNot confirmed | FixYes | Affected productCognos Command Center | Published11/08/2026 | SeverityMedium |
|---|
2,534 Results | Page 1 of 51