IBM — security advisories

35 advisories7 exploitedlatest 2026-07-10⚡ RSS feed

Tracked IBM products:

Aspera Faspex WebSphere Application Server InfoSphere BigInsights WebSphere Products Data Risk Manager Operational Decision Manager Planning Analytics Content-Aware Storage, DataStage, Decision Optimization, Host On-Demand, ApplinX, Cloud Pak for Data System null DataPower Gateway WebSphere Application Server and Application Server Liberty App Connect Enterprise Certified Container DB2 InfoSphere Information Server WebSphere Application Server Liberty ibmveth Security Verify Access Langflow Desktop OSS

⚡ Watch IBM

Get an email when a new IBM advisory drops — max one per day, one-click unsubscribe.

[NEW] [medium] IBM Langflow Desktop OSS: Vulnerability allows information disclosure

mediumCVE-2026-10700cert-bund2026-07-10

Multiple vulnerabilities in IBM products (July 10, 2026)

unknownCVE-2026-26007 CVE-2026-50645 CVE-2026-11383 CVE-2026-39892cert-fr-avis2026-07-10

[NEW] [high] IBM Operational Decision Manager: Multiple vulnerabilities

highCVE-2021-23337 CVE-2024-52046 CVE-2025-13465 CVE-2025-68161cert-bund2026-07-09

[NEW] [high] IBM Security Verify Access: Multiple vulnerabilities

highCVE-2019-19921 CVE-2022-48830 CVE-2022-49024 CVE-2022-49269cert-bund2026-07-09

[UPDATE] [high] IBM WebSphere Application Server: Multiple vulnerabilities

highCVE-2026-8620 CVE-2026-8633cert-bund2026-07-09

[NEW] [high] IBM Operational Decision Manager: Multiple vulnerabilities

highCVE-2026-10532 CVE-2026-45292 CVE-2026-47065 CVE-2026-9828cert-bund2026-07-08

[NEW] [medium] IBM WebSphere Application Server Liberty: Vulnerability allows denial of service

mediumCVE-2026-9563cert-bund2026-07-08

[NEW] [medium] IBM WebSphere Application Server: Vulnerability allows execution of actions

mediumCVE-2026-8408cert-bund2026-07-08

IBM security advisory (AV26-656)

criticalcccs2026-07-06

[UPDATE] [high] IBM WebSphere Application Server: Multiple vulnerabilities

highCVE-2026-8644 CVE-2026-9311 CVE-2026-9319 CVE-2026-9330cert-bund2026-07-03

[UPDATE] [medium] IBM WebSphere Application Server: Multiple vulnerabilities

mediumCVE-2026-4410 CVE-2026-5516cert-bund2026-07-03

Multiple vulnerabilities in IBM products (July 3, 2026)

unknownCVE-2026-50645 CVE-2026-11383 CVE-2026-42041 CVE-2026-39892cert-fr-avis2026-07-03

[NEW] [high] IBM DataPower Gateway: Multiple vulnerabilities

highCVE-2025-36374 CVE-2026-12733 CVE-2026-42264cert-bund2026-07-02

[UPDATE] [high] IBM WebSphere Application Server: Multiple vulnerabilities

highCVE-2026-10845 CVE-2026-10852 CVE-2026-8646 CVE-2026-8858cert-bund2026-07-02

[UPDATE] [high] IBM WebSphere Application Server: Multiple vulnerabilities

highCVE-2026-11708 CVE-2026-11712 CVE-2026-11595cert-bund2026-07-02

[UPDATE] [high] IBM WebSphere Application Server and Application Server Liberty: Multiple vulnerabilities

highCVE-2026-11383 CVE-2026-11536 CVE-2026-11541 CVE-2026-11594cert-bund2026-07-02

[UPDATE] [high] IBM App Connect Enterprise Certified Container: Multiple vulnerabilities

highCVE-2026-26013 CVE-2026-27142 CVE-2026-28277 CVE-2026-28684cert-bund2026-07-02

[UPDATE] [high] IBM DB2: Multiple vulnerabilities

highCVE-2025-2668 CVE-2025-36001 CVE-2025-36009 CVE-2025-36070cert-bund2026-07-02

[UPDATE] [medium] IBM DB2: Multiple vulnerabilities

mediumCVE-2025-13867 CVE-2025-14689 CVE-2025-36247 CVE-2025-36425cert-bund2026-07-02

[UPDATE] [medium] IBM DB2: Multiple vulnerabilities allow Denial of Service

mediumCVE-2025-14688 CVE-2025-36122 CVE-2026-1352 CVE-2026-1577cert-bund2026-07-02

IBM WebSphere Products Multiple Vulnerabilities

unknownCVE-2026-9006 CVE-2026-9171 CVE-2026-9322 CVE-2026-11546hkcert2026-07-02

[NEW] [low] IBM InfoSphere Information Server: Vulnerability allows information disclosure

lowCVE-2026-9836cert-bund2026-07-01

[NEW] [high] IBM WebSphere Application Server Liberty: Multiple vulnerabilities

highCVE-2026-11546 CVE-2026-11714cert-bund2026-07-01

IBM security advisory (AV26-639)

criticalcccs2026-06-29

Multiple vulnerabilities in IBM products (June 26, 2026)

unknownCVE-2026-5588 CVE-2025-36353 CVE-2025-66199 CVE-2026-33871cert-fr-avis2026-06-26

IBM WebSphere Products Multiple Vulnerabilities

unknownCVE-2026-11383 CVE-2026-11536 CVE-2026-11541 CVE-2026-11594hkcert2026-06-24

IBM security advisory (AV26-617)

criticalcccs2026-06-22

CVE-2026-46273: ibmveth: Disable GSO for packets with small MSS

mediumCVSS 5.5CVE-2026-46273msrc2026-06-09

CVE-2022-47986: IBM Aspera Faspex Code Execution Vulnerability

criticalexploitedCVE-2022-47986cisa-kev2023-02-21

CVE-2013-3993: IBM InfoSphere BigInsights Invalid Input Vulnerability

criticalexploitedCVE-2013-3993cisa-kev2022-05-25

CVE-2015-7450: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.

criticalexploitedCVE-2015-7450cisa-kev2022-01-10

CVE-2020-4427: IBM Data Risk Manager Security Bypass Vulnerability

criticalexploitedCVE-2020-4427cisa-kev2021-11-03

CVE-2020-4428: IBM Data Risk Manager Remote Code Execution Vulnerability

criticalexploitedCVE-2020-4428cisa-kev2021-11-03

CVE-2020-4430: IBM Data Risk Manager Directory Traversal Vulnerability

criticalexploitedCVE-2020-4430cisa-kev2021-11-03

CVE-2019-4716: IBM Planning Analytics Remote Code Execution Vulnerability

criticalexploitedCVE-2019-4716cisa-kev2021-11-03