Ibm vulnerabilities

Published CVEs affecting Ibm products: 1629 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-17499 High · 7.8 CWE-78 Sep 4, 2026

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVE-2026-17483 Low · 3.3 CWE-285 Sep 4, 2026

IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure.

CVE-2026-17470 High · 7.5 CWE-787 Sep 4, 2026

IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.

CVE-2026-17469 Medium · 5.5 CWE-193 Sep 4, 2026

IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser.

CVE-2026-17444 Medium · 6.5 CWE-611 Sep 4, 2026

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.

CVE-2026-17443 Medium · 6.5 CWE-611 Sep 4, 2026

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

CVE-2026-17442 Medium · 5.5 CWE-532 Sep 4, 2026

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext.

CVE-2026-17440 Medium · 5.5 CWE-674 Sep 4, 2026

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion.

CVE-2026-17274 Medium · 5.4 CWE-330 Sep 4, 2026

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds.

CVE-2026-17273 Medium · 6.5 CWE-476 Sep 4, 2026

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a NULL pointer dereference.

CVE-2026-17270 Medium · 5.5 CWE-121 Sep 4, 2026

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow.

CVE-2026-17259 Medium · 6.5 CWE-121 Sep 4, 2026

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.

CVE-2026-17255 High · 7.5 CWE-787 Sep 4, 2026

IBM i is Affected By Denial of Service Vulnerability []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements.

CVE-2026-17207 Critical · 9.1 CWE-787 Sep 4, 2026

IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow.

CVE-2026-17057 Critical · 9.1 CWE-306 Sep 4, 2026

IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to missing authentication for critical functions.

CVE-2026-16941 Medium · 4.3 CWE-863 Sep 4, 2026

IBM i is Affected By An Incorrect Authorization Vulnerability []

IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization.

CVE-2026-16892 Medium · 5.4 CWE-287 Sep 4, 2026

IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching.

CVE-2026-16826 High · 7.8 CWE-78 Sep 4, 2026

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVE-2026-16693 Medium · 4.9 CWE-327 Sep 4, 2026

IBM i is Affected By Cryptographic Algorithm Weakness in DCM []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys.

CVE-2026-16689 Medium · 5.5 CWE-532 Sep 4, 2026

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

CVE-2026-16660 Medium · 5.3 CWE-125 Sep 4, 2026

IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.

CVE-2026-16180 Medium · 5.7 CWE-776 Sep 4, 2026

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validation of XML entities.

CVE-2026-14470 Medium · 6.5 CWE-22 Sep 4, 2026

Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components

IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

CVE-2026-14350 Medium · 5.3 CWE-117 Sep 4, 2026

Vulnerabilities exists in IBM Cloud Pak for Data System

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

CVE-2026-13297 High · 7.5 CWE-1336 Sep 4, 2026

Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack.