vciy

CVEs we hold for Ibm

Records whose assigning authority named Ibm as the affected vendor. Newest identifiers first, capped at 200.

Announced together

3 groups of these records were each published under a single advisory. Each page names its advisory, counts what that group offers, and says what it does not cover.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2026-9836IBM DataStage Flow Designer application is affected by an information disclosure vulnerabilityIBM InfoSphere Information Server
CVE-2026-97680Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-97679Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-97678Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-97676Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-97674Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-97673Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-97671Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-97655Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-9762IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user controlIBM Db2
CVE-2026-9745Vulnerabilities exists in IBM Netezza SoftwareIBM Netezza Software
CVE-2026-9744Vulnerabilities exists in IBM Netezza SoftwareIBM Netezza Software
CVE-2026-9736Vulnerabilities exists in IBM Netezza SoftwareIBM Netezza Software
CVE-2026-9667IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
CVE-2026-96266IBM Power Systems Firmware Buffer OverflowIBM PowerVM Hypervisor
CVE-2026-96265IBM Power Systems Firmware Improper Memory Buffer RestrictionIBM PowerVM Hypervisor
CVE-2026-96264IBM Power Systems Firmware Buffer OverflowIBM PowerVM Hypervisor
CVE-2026-96263IBM Power Systems Firmware Buffer OverflowIBM PowerVM Hypervisor
CVE-2026-96262IBM Power Systems Firmware Buffer OverflowIBM PowerVM Hypervisor
CVE-2026-96261IBM Power Systems Firmware Buffer OverflowIBM PowerVM Hypervisor
CVE-2026-96119IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUIIBM i
CVE-2026-9610Multiple Vulnerabilities in IBM DatacapIBM Datacap Navigator
CVE-2026-96012IBM Db2 Mirror for i Privilege EscalationIBM Db2 Mirror for i
CVE-2026-95696IBM WebSphere Application Server Liberty Denial of ServiceIBM WebSphere Application Server - Liberty
CVE-2026-95695IBM WebSphere Application Server Liberty Incorrect AuthorizationIBM WebSphere Application Server - Liberty
CVE-2026-95680IBM WebSphere Application Server is affected by an authorization bypassIBM WebSphere Application Server
CVE-2026-93909IBM WebSphere Application Server Liberty is affected by an authentication bypassIBM WebSphere Application Server - Liberty
CVE-2026-93907IBM WebSphere Application Server is affected by a bypass authentication vulnerabilityIBM WebSphere Application Server
CVE-2026-93905IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted dataIBM WebSphere Application Server - Liberty
CVE-2026-93895IBM WebSphere Application Server Liberty Improper Access ControlIBM WebSphere Application Server - Liberty
CVE-2026-93892Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in Admin ConsoleIBM TRIRIGA Application Platform
CVE-2026-93891Security Vulnerability identified in IBM TRIRIGA - XXEIBM TRIRIGA Application Platform
CVE-2026-93886IBM i is Affected By An Improper Neutralization of Input Vulnerability in HTTP Server Administration GUIIBM i
CVE-2026-93679Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-93678Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-93677Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-93675Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-93674Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-93449Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-93448Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-93447Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-93445Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-93443Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-9338IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
CVE-2026-9336IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
CVE-2026-93306This Power System update is being released to addressIBM Server Firmware
CVE-2026-9330IBM WebSphere Application Server is affected by remote code executionIBM WebSphere Application Server
CVE-2026-9327IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
CVE-2026-9322IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesIBM WebSphere Application Server - Liberty
CVE-2026-9320IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesIBM WebSphere Application Server - Liberty
CVE-2026-9319IBM WebSphere Application Server is affected by a remote code execution vulnerabilityIBM WebSphere Application Server
CVE-2026-9311IBM WebSphere Application Server is affected by remote code executionIBM WebSphere Application Server
CVE-2026-93030no title heldIBM Financial Transaction Manager (FTM) for Redhat OpenShift
CVE-2026-92876IBM Maximo Application Suite - IoT Component Denial of ServiceIBM Maximo Application Suite - IoT Component
CVE-2026-92832IBM Aspera Enterprise Webapps Information DisclosureIBM Aspera Enterprise WebApps
CVE-2026-9225Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validationIBM Langflow OSS
CVE-2026-9205Langflow is affected by weaknesses in secret handling and sensitive configuration accessIBM Langflow OSS
CVE-2026-9202Unauthenticated User Registration Could Lead to Remote Code ExecutionIBM Langflow OSS
CVE-2026-9201Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
CVE-2026-9198Unauthenticated Remote Code Execution via Auto-Login Bypass and Code ValidationIBM Langflow OSS
CVE-2026-9196Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
CVE-2026-9186Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and…IBM Langflow OSS
CVE-2026-9176IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
CVE-2026-9171Vulnerabilities in IBM WebSphere Application affects IBM PowerVM Novalink.IBM PowerVM Novalink
CVE-2026-9170IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
CVE-2026-9138Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing…IBM Langflow OSS
CVE-2026-9135Policies Component Dynamic CodeInput Fields Bypass Custom Component ValidationIBM Langflow OSS
CVE-2026-9130Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementIBM Langflow OSS
CVE-2026-9103Unauthenticated Superuser Token Issuance via Auto-Login EndpointIBM Langflow OSS
CVE-2026-90921Maximo AI Service Denial of ServiceIBM Maximo AI Service
CVE-2026-90920Maximo AI Service Code InjectionIBM Maximo AI Service
CVE-2026-90912Maximo AI Service Denial of ServiceIBM Maximo AI Service
CVE-2026-90911Maximo AI Service Denial of ServiceIBM Maximo AI Service
CVE-2026-9081Langflow OSS is affected by server-side request forgery in provider validation and API request functionalityIBM Langflow OSS
CVE-2026-9077Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol featuresIBM Langflow OSS
CVE-2026-9074IBM API Connect SQL InjectionIBM API Connect
CVE-2026-9072WebSphere Application Server Remote Code ExecutionIBM WebSphere Application Server
CVE-2026-9071IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource…IBM WebSphere Application Server - Liberty
CVE-2026-9036Vulnerabilities exists in IBM Netezza SoftwareIBM Netezza Software
CVE-2026-9035Multiple vulnerabilities in Aspera applications.IBM Aspera High-Speed Transfer Server
CVE-2026-9006IBM WebSphere Application Server is affected by server-side request forgeryIBM WebSphere Application Server
CVE-2026-9002IBM WebSphere eXtremes Scale is affected by uncontrolled resource consumption when XDF is enabledIBM WebSphere Extreme Scale
CVE-2026-88962Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
CVE-2026-8862Vulnerabilities exists in IBM Netezza SoftwareIBM Netezza Software
CVE-2026-8861Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access Container
CVE-2026-8859Path Traversal in APIRequest Component via Content-Disposition HeaderIBM Langflow OSS
CVE-2026-8858WebSphere Application Server Remote Code ExecutionIBM WebSphere Application Server
CVE-2026-8856IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
CVE-2026-8855IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
CVE-2026-8854IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
CVE-2026-8852IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
CVE-2026-8850IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
CVE-2026-8835IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
CVE-2026-8834IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
CVE-2026-87980Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-87958IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a…IBM Db2
CVE-2026-8646IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesIBM WebSphere Application Server - Liberty
CVE-2026-8644IBM WebSphere Application Server is affected by an identity spoofing vulnerabilityIBM WebSphere Application Server
CVE-2026-8636Multiple Vulnerabilities in IBM DatacapIBM Datacap Navigator
CVE-2026-8635Arbitrary Code Execution in Python Interpreter ComponentIBM Langflow OSS
CVE-2026-8633IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when…IBM Web Server Plug-ins for WebSphere Application Server…
CVE-2026-8620IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when…IBM Web Server Plug-ins for WebSphere Application Server…
CVE-2026-86093IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to…IBM Db2
CVE-2026-86087IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the systemIBM Db2
CVE-2026-85542IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-85457IBM Planning Analytics Local is affected by security vulnerabilitiesIBM Planning Analytics
CVE-2026-8505Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow ExecutionIBM Langflow OSS
CVE-2026-85029IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-85025Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing…IBM Langflow OSS
CVE-2026-84893IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84891Security vulnerability affects the Windows GIM component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84889A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to…IBM Langflow OSS
CVE-2026-84884IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84882IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84875Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84862IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84842IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-8481Remote Code Execution via Code Validation EndpointIBM Langflow OSS
CVE-2026-8478Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
CVE-2026-8476Disk Cache Deserialization Remote Code Execution VulnerabilityIBM Langflow OSS
CVE-2026-8470Langflow is affected by weaknesses in secret handling and sensitive configuration accessIBM Langflow OSS
CVE-2026-8447Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and…IBM Langflow OSS
CVE-2026-8446Langflow is affected by security vulnerabilities in Model Context Protocol featuresIBM Langflow OSS
CVE-2026-84440IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84436IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84422IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84421DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
CVE-2026-84418DataStage on Cloud Pak for Data Improper Certificate ValidationIBM DataStage on Cloud Pak for Data
CVE-2026-84414IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []IBM i
CVE-2026-84290Security vulnerability affects the Windows S-TAP component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84278IBM Guardium Data Protection Command InjectionIBM Guardium Data Protection
CVE-2026-84276IBM Guardium Data Protection Denial of ServiceIBM Guardium Data Protection
CVE-2026-84275IBM Guardium Data Protection Path TraversalIBM Guardium Data Protection
CVE-2026-84274IBM Guardium Data Protection Information DisclosureIBM Guardium Data Protection
CVE-2026-84272IBM Guardium Data Protection Missing AuthenticationIBM Guardium Data Protection
CVE-2026-84271IBM Guardium Data Protection Signature Verification BypassIBM Guardium Data Protection
CVE-2026-84250IBM Guardium Data Protection Hard-coded CredentialsIBM Guardium Data Protection
CVE-2026-84249IBM Guardium Data Protection is affected by vulnerabilityIBM Guardium Data Protection
CVE-2026-84247IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84246Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84245IBM Guardium Data Protection Privilege EscalationIBM Guardium Data Protection
CVE-2026-84244IBM Guardium Data Protection Cross-Site ScriptingIBM Guardium Data Protection
CVE-2026-84241IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84239IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84230IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM Guardium Data Protection
CVE-2026-84209IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84198Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84108IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84106IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84105IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84089IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84086IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84085IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84084IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84083IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84082IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84081IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84078IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84077IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84076IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84075IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84074IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84073IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84071IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84070IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84064IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84058Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84057IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-8405IBM Guardium Data Protection is affected by Exposure of Sensitive Information vulnerabilityIBM Guardium Data Protection
CVE-2026-84036IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84035Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84034IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84032IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM Guardium Data Protection
CVE-2026-84031IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-8400Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server…IBM WebSphere Application Server - Liberty
CVE-2026-82967IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82900IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82896IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82895Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-82893IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82892IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82890IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82887IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82885IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82832IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82344IBM Guardium Data Protection Buffer OverflowIBM Guardium Data Protection
CVE-2026-82340IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82335IBM Guardium Data Protection Buffer OverflowIBM Guardium Data Protection
CVE-2026-82334IBM Guardium Data Protection Out-of-bounds ReadIBM Guardium Data Protection
CVE-2026-82110DataStage on Cloud Pak for Data Path TraversalIBM DataStage on Cloud Pak for Data
CVE-2026-82108DataStage on Cloud Pak for Data Code InjectionIBM DataStage on Cloud Pak for Data
CVE-2026-82107DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
CVE-2026-82103DataStage on Cloud Pak for Data Information DisclosureIBM DataStage on Cloud Pak for Data
CVE-2026-82101DataStage on Cloud Pak for Data Path TraversalIBM DataStage on Cloud Pak for Data
CVE-2026-82100DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
CVE-2026-82099DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
CVE-2026-82098DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
CVE-2026-82097DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
CVE-2026-82096DataStage on Cloud Pak for Data Command InjectionIBM DataStage on Cloud Pak for Data
CVE-2026-82095DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data

200 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.