IBM security advisory (AV26-922)

Serial number: AV26-922 Date: September 15, 2026 As of September 14, 2026, IBM is affected by vulnerabilities in the following products: Langflow OSS Prior to or equal to 1.10.0 Prior to or equal to 1.10.2 Prior to or equal to 1.11.2 Prior to or equal to 1.11.5 MQ 10.0.0.0 Prior to or equal to 9.1.0.37 LTS Prior to or equal to 9.2.0.43 LTS Prior to or equal to 9.3.0.41 LTS Prior to or equal to 9.3.5.1 CD Prior to or equal to 9.4.0.25 LTS Prior to or equal to 9.4.5.1 CD Sterling File Gateway Prior to or equal to 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates. Incomplete Security Scanner Blocklist Enables Network-Based Code Execution IBM MQ Java messaging is vulnerable to remote code execution (CVE-2026-13293) IBM Sterling File Gateway is Vulnerable to Improper Access Control (CVE-2026-19290) IBM Product Security Incident Response