Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

IBM — Vulnerabilities & Security Advisories 5906

Browse all 5906 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2026-76587 IBM Planning Analytics Buffer Overflow — Planning Analytics CWE-121 8.8 High 2026-10-20
CVE-2026-9825 IBM Cyber Fraud Reachable Assertion — CyberFraud CWE-617 3.7 Low 2026-10-20
CVE-2026-81212 DataStage on Cloud Pak for Data Improper Authorization — DataStage on Cloud Pak for Data CWE-285 10.0 Critical 2026-10-20
CVE-2026-82891 IBM Guardium Data Protection is affected by a security vulnerability — Guardium Data Protection CWE-321 8.1 High 2026-10-20
CVE-2026-87800 IBM Cyber Fraud includes components with multiple known vulnerabilities — Cyber Fraud CWE-434 6.8 Medium 2026-10-20
CVE-2026-92559 IBM App Connect Enterprise is vulnerable to a credential exposure — App Connect Enterprise CWE-1327 9.8 Critical 2026-10-20
CVE-2026-93441 IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service — QRadar Security Information and Event Management CWE-400 8.6 High 2026-10-20
CVE-2026-93442 IBM QRadar SIEM Out-of-bounds Read — QRadar CWE-125 8.2 High 2026-10-20
CVE-2026-93744 IBM i Improper Authentication — i CWE-287 6.5 Medium 2026-10-20
CVE-2026-93888 IBM Sterling Connect:Direct for Unix Buffer Overflow — Sterling Connect Direct for Unix CWE-121 7.8 High 2026-10-20
CVE-2026-94402 IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation — @carbon/charts CWE-79 6.1 Medium 2026-10-20
CVE-2026-105453 IBM Sterling Connect:Direct for Unix Improper Privilege Management — Sterling Connect Direct for Unix CWE-269 8.4 High 2026-10-19
CVE-2026-107366 Langflow OSS Authorization Bypass Through User-Controlled Key — Langflow OSS CWE-639 8.3 High 2026-10-19
CVE-2026-107400 Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication — TRIRIGA Application Platform CWE-287 8.8 High 2026-10-19
CVE-2026-109126 IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials — Verify Identity Access CWE-798 8.8 High 2026-10-19
CVE-2026-8355 IBM ContextForge MCP Gateway is affected by server-side request forgery — ContextForge MCP Gateway CWE-918 - - 2026-10-19
CVE-2025-36061 TS4500 Tape Library Denial of Service — Storage TS4500 Library CWE-770 6.5 Medium 2026-10-19
CVE-2025-36069 TS4500 Tape Library Insufficient Session Expiration — Storage TS4500 Library CWE-613 5.5 Medium 2026-10-19
CVE-2025-36252 TS4500 Tape Library Insufficient Session Expiration — Storage TS4500 Library CWE-613 6.3 Medium 2026-10-19
CVE-2026-19178 TS4500 Tape Library Race Condition — Storage TS4500 Library CWE-362 6.8 Medium 2026-10-19
CVE-2023-38375 IBM Cloud Pak System Cross-Site Scripting — Cloud Pak System CWE-79 6.1 Medium 2026-10-19
CVE-2026-3161 IBM Cloud Pak System Risky Cryptographic Algorithm — Cloud Pak System CWE-327 5.9 Medium 2026-10-19
CVE-2026-3295 IBM Cloud Pak System Cross-Site Scripting — Cloud Pak System CWE-79 7.4 High 2026-10-19
CVE-2026-4418 IBM Cloud Pak System HTML Injection — Cloud Pak System CWE-80 5.4 Medium 2026-10-19
CVE-2026-1501 IBM Concert Software Improper Certificate Validation — Concert CWE-295 3.7 Low 2026-10-19
CVE-2026-1510 IBM Concert Software Improper Clearing of Heap Memory — Concert CWE-244 4.7 Medium 2026-10-19
CVE-2026-3303 IBM Concert Software Permissive Cross-domain Security Policy — Concert CWE-942 3.7 Low 2026-10-19
CVE-2026-3628 IBM Concert Software Information Disclosure — Concert CWE-209 5.3 Medium 2026-10-19
CVE-2026-4405 IBM Concert Software Use of Web Browser Cache Containing Sensitive Information — Concert CWE-525 4.0 Medium 2026-10-19
CVE-2026-4413 IBM Concert Software Cross-Site Scripting — Concert CWE-79 6.1 Medium 2026-10-19

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.