Vendor
IBM
- CVEs tracked · all time
- 71
- in CISA KEV · all time
- 1
- articles · since 11 Sep
- 12
- articles · all time
- 34
12 articles since 11 Sep.
Show as table
| Day (UTC) | Articles |
|---|---|
| Fri 11 Sep | 1 |
| Wed 16 Sep | 1 |
| Sun 20 Sep | 1 |
| Mon 21 Sep | 1 |
| Wed 23 Sep | 2 |
| Tue 29 Sep | 1 |
| Tue 6 Oct | 1 |
| Thu 8 Oct | 1 |
| Fri 9 Oct | 1 |
| Tue 13 Oct | 1 |
| Wed 14 Oct | 1 |
Products: Aspera Desktop App, Aspera High-Speed Transfer Endpoint, Aspera High-Speed Transfer Server, Aspera HSTS for CP4I and 24 more
Aspera Desktop AppAspera High-Speed Transfer EndpointAspera High-Speed Transfer ServerAspera HSTS for CP4IDataStage on Cloud Pak for DataDb2Db2 Mirror for iDocumentation OfflineEngineering Lifecycle ManagementFinancial Transaction Manager (FTM) for RedHat OpenShiftGuardium Data ProtectionHMC V10.3.1050.0HMC V11.1.1110.0iLangflowLangflow OSSMaximo AI ServiceMQ ApplianceMQ for HPE NonStopPower Systems FirmwareSecurity Verify AccessSecurity Verify Access ContainerTurbonomic prometurbo agentVerify Identity AccessVerify Identity Access ContainerWeb Server Plug-ins for WebSphere Application Server and WebSphere LibertyWebSphere Application ServerWebSphere Application Server - Liberty
CVEs
71 CVEs, the 40 listed known exploited firstCVE-2026-93909IBM WebSphere Application Server - Liberty vulnerabilityCVSS9.1Critical–Not in KEV0.3%EPSS1article
CVE-2026-93895IBM WebSphere Application Server - Liberty vulnerabilityCVSS9.1Critical–Not in KEV0.4%EPSS1article
CVE-2026-95695IBM WebSphere Application Server - Liberty vulnerabilityCVSS7.4High–Not in KEV0.3%EPSS1article
CVE-2026-95696IBM WebSphere Application Server - Liberty vulnerabilityCVSS6.5Medium–Not in KEV0.3%EPSS1article
28 more CVEs
CVE-2026-93674Langflow OSS is affected by multiple vulnerabilitiesCVSS9.8Critical–Not in KEV6.2%EPSS1article
CVE-2026-104334Langflow OSS is affected by multiple vulnerabilitiesCVSS9.8Critical–Not in KEV0.7%EPSS1article
CVE-2026-93675Langflow OSS is affected by multiple vulnerabilitiesCVSS8.8High–Not in KEV0.6%EPSS1article
CVE-2026-16346IBM DataStage on Cloud Pak for Data vulnerabilityCVSS9.9Critical–Not in KEV0.5%EPSS1article
CVE-2026-84421DataStage on Cloud Pak for Data has several vulnerabilitiesCVSS8.8High–Not in KEV0.6%EPSS1article
CVE-2026-81545DataStage on Cloud Pak for Data has several vulnerabilitiesCVSS8.8High–Not in KEV0.9%EPSS1article
CVE-2026-17102IBM DataStage on Cloud Pak for Data vulnerabilityCVSS8.8High–Not in KEV0.6%EPSS1article
CVE-2026-84418DataStage on Cloud Pak for Data Improper Certificate ValidationCVSS7.4High–Not in KEV0.1%EPSS1article
CVE-2026-18169IBM Financial Transaction Manager (FTM) for RedHat OpenShift vulnerabilityCVSS9.9Critical–Not in KEV0.5%EPSS1article
CVE-2026-18162IBM Financial Transaction Manager (FTM) for RedHat OpenShift vulnerabilityCVSS9.8Critical–Not in KEV0.5%EPSS1article
CVE-2026-18163IBM Financial Transaction Manager (FTM) for RedHat OpenShift vulnerabilityCVSS9.8Critical–Not in KEV0.5%EPSS1article
CVE-2026-16338DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareCVSS9.9Critical–Not in KEV0.4%EPSS1article
CVE-2026-82100IBM DataStage on Cloud Pak for Data vulnerabilityCVSS9.6Critical–Not in KEV0.6%EPSS1article
- IBM Fixes Critical WebSphere Liberty Flaws Enabling Remote Access BypassSecurityOnline
- IBM Patches Critical Maximo AI Flaw Allowing Unauthenticated Remote Code ExecutionSecurityOnline
- IBM Patches Critical Verify Access Flaws Enabling Remote Code ExecutionSecurityOnline
- IBM Patches 23 DataPower Gateway Flaws, Including Four Critical BugsSecurityOnline
- IBM Patches Critical Langflow Flaws That Enable Unauthenticated RCESecurityOnline
- Kubernetes Operators’ Excessive Privileges Expose Secrets Across ClustersUnit 42
- IBM Patches 22 DataStage Flaws Enabling Command Execution and Credential TheftSecurityOnline
- IBM FTM Flaws Put OpenShift Payment Systems at Risk of Code ExecutionSecurityOnline
- IBM Guardium Flaws Could Let Attackers Take Root-Level ControlSecurityOnline
- IBM MQ Flaws Enable Pre-Authentication Code Execution and DoSSecurityOnline
- Critical Langflow Flaw Lets Authenticated Users Run Code as RootSecurityOnline
- IBM DataStage Flaws Let Authenticated Attackers Write Files and Run CodeSecurityOnline
- IBM fixes critical Power Systems flaws enabling full controlSecurityOnline
- Urgent Patches Address Flaws in Microsoft, Apple, IBM Db2SecurityOnline
- CVE-2026-17482: IBM Remote Code Execution Flaw (CVSS 9.8)SecurityOnline
- CISA Flags Critical Flaws in IBM Langflow, N able and TomcatSecurity Affairs
- CISA warns of exploits in IBM Langflow, Nable, and Tomcat flawsSecurityWeek
- Apple tightens bug bounty amid surge of AI generated flaw reportsSecurityOnline
- N-able N-central Flaw Exploited in the Wild as CISA Adds Three to KEV CatalogSecurityOnline
- CISA Flags IBM Langflow CVE-2026-9198 Code Injection in KEV ListCISA · official notice
- Critical IBM Langflow Flaw Exploited, Patch Urged by CISACISA · official notice
- IBM patches critical Aspera flaws, including RCE bugSecurityOnline
- IBM patches critical HMC flaw letting hackers run system commandsSecurityOnline
- Weekly Threat Intelligence: The July 2026 BreachesSecurityOnline
- IBM patches three critical WebSphere flaws, urges urgent fixesSecurityOnline
- IBM Flags Critical Langflow Bugs Allowing Remote Code ExecutionSecurityOnline
- IBM Db2 hits critical flaw CVE-2026-10109, urgent patch advisedSecurityOnline
- Critical IBM Langflow flaws let attackers run code remotelySecurityOnline
- IBM WebSphere bugs risk remote code execution, patch nowSecurityOnline
- IBM patches critical Aspera flaws including severe CVEsSecurityOnline
- IBM flags critical WebSphere CVE-2026-8633 flaw in versionsSecurityOnline
- IBM warns of critical CVE-2026-7524 flaw in Langflow AI frameworkSecurityOnline
- IBM patches CVE-2026-3660 flaw in Jazz Foundation platformSecurityOnline
- CVE-2025-13375: Critical IBM Crypto Flaw (CVSS 9.8) Exposes HSMsSecurityOnline · first in our coverage