IBM security advisory (AV26-684)
Serial number: AV26-684 Date: July 13, 2026 Between July 6 and 12, 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following: IBM Aspera Enterprise WebApps – versions 1.0.0 to 1.0.3 IBM Cloud Pak System – versions prior to 2.3.5.0 IBM Cloud Pak for Data System (CPDS) – versions 1.0.0.0 to 1.0.10.0 IBM Guardium Data Protection – versions prior to 12.2 IBM Library Support for Spring – versions 3.2 to 3.2.26 and 3.4 to 3.4.18 IBM Maximo Application Suite – Monitor Component – versions prior to 9.1 and 9.0 IBM Operational Decision Manager – multiple versions IBM Planning Analytics Local – versions 2.1.0 to 2.1.21 IBM RDi – version 9.9 IBM SPSS Modeler – versions prior to 19.0.0.0 IBM Software Support App (iOS) / (Android) – versions 4.0.1 to 4.1.0 IBM Storage Protect Snapshot For Windows – versions 8.1.0.0 to 8.2.1.0 IBM Tivoli Network Manager IP Edition – versions 4.2 GA to 4.2.0.24 The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates. IBM Product Security Incident Response
CSIRTS triage
- What
- IBM published security advisories to address vulnerabilities in multiple products, including critical updates.
- Who is affected
- Users of the specified IBM products.
- Urgency
- Remediation is urgent due to the critical nature of the vulnerabilities.
- Action
- Apply the necessary updates to the affected IBM products.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch IBM Aspera Enterprise WebApps
Get an email when a new IBM Aspera Enterprise WebApps advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://cyber.gc.ca/en/alerts-advisories/ibm-security-advisory-av26-684
More from Canadian Centre for Cyber Security
- unknownGoogle security advisory (AV26-768)2026-07-31
- unknownRails security advisory (AV26-767)2026-07-31
- unknownSolarWinds security advisory (AV26-766)2026-07-31
- unknownGladinet security advisory (AV26-765)2026-07-30
- unknownPHP Group security advisory (AV26-764)2026-07-30