Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 4858

Browse all 4858 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE IDTitleCVSSSeverityPublished
CVE-2026-8056 Parameter Injection Vulnerability in API Graph Execution Engine — Langflow OSSCWE-94 8.8 High2026-07-17
CVE-2026-8476 Disk Cache Deserialization Remote Code Execution Vulnerability — Langflow OSSCWE-502 9.9 Critical2026-07-17
CVE-2026-8481 Remote Code Execution via Code Validation Endpoint — Langflow OSSCWE-94 9.9 Critical2026-07-17
CVE-2026-8505 Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow Execution — Langflow OSS 9.8 Critical2026-07-17
CVE-2026-8635 Arbitrary Code Execution in Python Interpreter Component — Langflow OSSCWE-94 9.9 Critical2026-07-17
CVE-2026-8859 Path Traversal in APIRequest Component via Content-Disposition Header — Langflow OSSCWE-22 9.9 Critical2026-07-17
CVE-2026-8861 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Verify Identity AccessCWE-209 5.3 Medium2026-07-17
CVE-2026-9103 Unauthenticated Superuser Token Issuance via Auto-Login Endpoint — Langflow OSSCWE-306 9.8 Critical2026-07-17
CVE-2026-9135 Policies Component Dynamic CodeInput Fields Bypass Custom Component Validation — Langflow OSSCWE-94 9.9 Critical2026-07-17
CVE-2026-9171 Vulnerabilities in IBM WebSphere Application affects IBM PowerVM Novalink. — PowerVM NovalinkCWE-400 7.5 High2026-07-17
CVE-2026-9198 Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation — Langflow OSSCWE-94 9.8 Critical2026-07-17
CVE-2026-9202 Unauthenticated User Registration Could Lead to Remote Code Execution — Langflow OSSCWE-306 9.8 Critical2026-07-17
CVE-2026-9762 IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control — Db2CWE-94 7.8 High2026-07-17
CVE-2026-9074 IBM API Connect SQL Injection — API ConnectCWE-89 9.1 Critical2026-07-08
CVE-2026-3144 IBM API Connect Default Credentials — API ConnectCWE-1392 8.1 High2026-07-08
CVE-2026-11541 Inconsistent Interpretation of HTTP Requests in CICS Transaction Gateway for Multiplatforms. — CICS Transaction Gateway for MultiplatformsCWE-444 7.4 High2026-06-30
CVE-2026-11594 IBM WebSphere Application Server is affected by multiple cross-site scripting vulnerabilities — WebSphere Application ServerCWE-79 8.5 High2026-06-30
CVE-2025-12530 Vulnerabilities found in Watson Data Intelligence — watsonx.data intelligenceCWE-319 5.9 Medium2026-06-30
CVE-2025-36319 Vulnerabilities found in Watson Data Intelligence — watsonx.data intelligenceCWE-770 4.3 Medium2026-06-30
CVE-2025-36320 Vulnerabilities found in Watson Data Intelligence — watsonx.data intelligenceCWE-79 6.4 Medium2026-06-30
CVE-2025-36321 Vulnerabilities found in Watson Data Intelligence — watsonx.data intelligenceCWE-80 5.7 Medium2026-06-30
CVE-2025-36323 Vulnerabilities found in Watson Data Intelligence — watsonx.data intelligenceCWE-79 5.4 Medium2026-06-30
CVE-2025-36324 Vulnerabilities found in Watson Data Intelligence — watsonx.data intelligenceCWE-918 4.3 Medium2026-06-30
CVE-2025-36327 Vulnerabilities found in Watson Data Intelligence — watsonx.data intelligenceCWE-602 6.5 Medium2026-06-30
CVE-2025-36328 Error Message Containing Sensitive Information found in Watson Data Intelligence — watsonx.data intelligenceCWE-209 4.3 Medium2026-06-30
CVE-2025-36333 Vulnerabilities found in Watson Data Intelligence — watsonx.data intelligenceCWE-841 4.3 Medium2026-06-30
CVE-2025-36336 Cleartext Transmission of Sensitive Information in Watson Data Intelligence — watsonx.data intelligenceCWE-319 5.9 Medium2026-06-30
CVE-2025-36359 IBM DevOps Loop is susceptible to an Insufficient Session Expiration vulnerability. — DevOps AutomationCWE-613 8.1 High2026-06-30
CVE-2025-36372 IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables — Db2CWE-538 5.5 Medium2026-06-30
CVE-2026-10109 IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling — Db2CWE-94 9.8 Critical2026-06-30

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.