CVEs we hold for Ibm
Records whose assigning authority named Ibm as the affected vendor. Newest identifiers first, capped at 200.
Announced together
3 groups of these records were each published under a single advisory. Each page names its advisory, counts what that group offers, and says what it does not cover.
Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.
CVE-2026-9836IBM DataStage Flow Designer application is affected by an information disclosure vulnerabilityIBM InfoSphere Information Server
CVE-2026-9762IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user controlIBM Db2
CVE-2026-9667IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
CVE-2026-96119IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUIIBM i
CVE-2026-95696IBM WebSphere Application Server Liberty Denial of ServiceIBM WebSphere Application Server - Liberty
CVE-2026-95695IBM WebSphere Application Server Liberty Incorrect AuthorizationIBM WebSphere Application Server - Liberty
CVE-2026-95680IBM WebSphere Application Server is affected by an authorization bypassIBM WebSphere Application Server
CVE-2026-93909IBM WebSphere Application Server Liberty is affected by an authentication bypassIBM WebSphere Application Server - Liberty
CVE-2026-93907IBM WebSphere Application Server is affected by a bypass authentication vulnerabilityIBM WebSphere Application Server
CVE-2026-93905IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted dataIBM WebSphere Application Server - Liberty
CVE-2026-93895IBM WebSphere Application Server Liberty Improper Access ControlIBM WebSphere Application Server - Liberty
CVE-2026-93892Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in Admin ConsoleIBM TRIRIGA Application Platform
CVE-2026-93891Security Vulnerability identified in IBM TRIRIGA - XXEIBM TRIRIGA Application Platform
CVE-2026-93886IBM i is Affected By An Improper Neutralization of Input Vulnerability in HTTP Server Administration GUIIBM i
CVE-2026-9338IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
CVE-2026-9336IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
CVE-2026-9330IBM WebSphere Application Server is affected by remote code executionIBM WebSphere Application Server
CVE-2026-9327IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
CVE-2026-9322IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesIBM WebSphere Application Server - Liberty
CVE-2026-9320IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesIBM WebSphere Application Server - Liberty
CVE-2026-9319IBM WebSphere Application Server is affected by a remote code execution vulnerabilityIBM WebSphere Application Server
CVE-2026-9311IBM WebSphere Application Server is affected by remote code executionIBM WebSphere Application Server
CVE-2026-92876IBM Maximo Application Suite - IoT Component Denial of ServiceIBM Maximo Application Suite - IoT Component
CVE-2026-9225Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validationIBM Langflow OSS
CVE-2026-9205Langflow is affected by weaknesses in secret handling and sensitive configuration accessIBM Langflow OSS
CVE-2026-9201Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
CVE-2026-9198Unauthenticated Remote Code Execution via Auto-Login Bypass and Code ValidationIBM Langflow OSS
CVE-2026-9196Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
CVE-2026-9186Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and…IBM Langflow OSS
CVE-2026-9176IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
CVE-2026-9171Vulnerabilities in IBM WebSphere Application affects IBM PowerVM Novalink.IBM PowerVM Novalink
CVE-2026-9138Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing…IBM Langflow OSS
CVE-2026-9135Policies Component Dynamic CodeInput Fields Bypass Custom Component ValidationIBM Langflow OSS
CVE-2026-9130Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementIBM Langflow OSS
CVE-2026-9081Langflow OSS is affected by server-side request forgery in provider validation and API request functionalityIBM Langflow OSS
CVE-2026-9077Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol featuresIBM Langflow OSS
CVE-2026-9071IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource…IBM WebSphere Application Server - Liberty
CVE-2026-9006IBM WebSphere Application Server is affected by server-side request forgeryIBM WebSphere Application Server
CVE-2026-9002IBM WebSphere eXtremes Scale is affected by uncontrolled resource consumption when XDF is enabledIBM WebSphere Extreme Scale
CVE-2026-8861Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access Container
CVE-2026-87980Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-87958IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a…IBM Db2
CVE-2026-8646IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesIBM WebSphere Application Server - Liberty
CVE-2026-8644IBM WebSphere Application Server is affected by an identity spoofing vulnerabilityIBM WebSphere Application Server
CVE-2026-8633IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when…IBM Web Server Plug-ins for WebSphere Application Server…
CVE-2026-8620IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when…IBM Web Server Plug-ins for WebSphere Application Server…
CVE-2026-86093IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to…IBM Db2
CVE-2026-86087IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the systemIBM Db2
CVE-2026-85542IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-85457IBM Planning Analytics Local is affected by security vulnerabilitiesIBM Planning Analytics
CVE-2026-8505Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow ExecutionIBM Langflow OSS
CVE-2026-85029IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-85025Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing…IBM Langflow OSS
CVE-2026-84893IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84891Security vulnerability affects the Windows GIM component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84889A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to…IBM Langflow OSS
CVE-2026-84884IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84882IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84875Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84862IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84842IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-8478Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
CVE-2026-8470Langflow is affected by weaknesses in secret handling and sensitive configuration accessIBM Langflow OSS
CVE-2026-8447Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and…IBM Langflow OSS
CVE-2026-8446Langflow is affected by security vulnerabilities in Model Context Protocol featuresIBM Langflow OSS
CVE-2026-84440IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84436IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84422IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84421DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
CVE-2026-84418DataStage on Cloud Pak for Data Improper Certificate ValidationIBM DataStage on Cloud Pak for Data
CVE-2026-84414IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []IBM i
CVE-2026-84290Security vulnerability affects the Windows S-TAP component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84271IBM Guardium Data Protection Signature Verification BypassIBM Guardium Data Protection
CVE-2026-84247IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84246Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84241IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84239IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84230IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM Guardium Data Protection
CVE-2026-84209IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84198Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84108IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84106IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84105IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84089IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84086IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84085IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84084IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84083IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84082IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84081IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84078IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84077IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84076IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84075IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84074IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84073IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84071IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84070IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84064IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84058Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84057IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-8405IBM Guardium Data Protection is affected by Exposure of Sensitive Information vulnerabilityIBM Guardium Data Protection
CVE-2026-84036IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84035Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-84034IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-84032IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM Guardium Data Protection
CVE-2026-84031IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-8400Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server…IBM WebSphere Application Server - Liberty
CVE-2026-82967IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82900IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82896IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82895Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
CVE-2026-82893IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82892IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82890IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82887IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82885IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82832IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82340IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
CVE-2026-82107DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
CVE-2026-82103DataStage on Cloud Pak for Data Information DisclosureIBM DataStage on Cloud Pak for Data
CVE-2026-82100DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
CVE-2026-82099DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
CVE-2026-82098DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
CVE-2026-82097DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
CVE-2026-82095DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
200 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.