Skip to content
THREATWIRE

CVE Tracker · Vendor

IBM CVEs

72 CVEs in the tracker, 8 in the CISA KEV catalogue.

All vendors · RSS feed for IBM · Tracker data last updated 18 Oct 2026.

Showing 50 of 72

  1. CVE-2026-81858CVSS 8.1 highEPSS 0.48%2026-10-13

    i. IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obt…

  2. CVE-2026-84418CVSS 7.4 highEPSS 0.14%2026-10-12

    datastage on cloud pak for data. IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS ce…

  3. CVE-2026-82110CVSS 9.9 criticalEPSS 0.52%2026-10-12

    datastage on cloud pak for data. IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary…

  4. CVE-2026-82108CVSS 8.8 highEPSS 0.46%2026-10-12

    datastage on cloud pak for data. IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary…

  5. CVE-2026-82101CVSS 9.6 criticalEPSS 0.41%2026-10-12

    datastage on cloud pak for data. IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of…

  6. CVE-2026-82096CVSS 8.8 highEPSS 0.43%2026-10-12

    datastage on cloud pak for data. IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary…

  7. CVE-2026-19622CVSS 9.8 criticalEPSS 0.34%2026-10-12

    planning analytics. IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privi…

  8. CVE-2026-84891CVSS 7.5 highEPSS 0.30%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive informati…

  9. CVE-2026-84875CVSS 8.8 highEPSS 0.44%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due…

  10. CVE-2026-84275CVSS 7.5 highEPSS 0.33%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An un…

  11. CVE-2026-84250CVSS 7.8 highEPSS <0.1%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recover…

  12. CVE-2026-84246CVSS 9.8 criticalEPSS 0.38%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due…

  13. CVE-2026-84209CVSS 9.8 criticalEPSS 0.32%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands…

  14. CVE-2026-84198CVSS 9.8 criticalEPSS 0.38%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due…

  15. CVE-2026-84058CVSS 9.8 criticalEPSS 0.37%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL…

  16. CVE-2026-84057CVSS 9.8 criticalEPSS 0.39%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due…

  17. CVE-2026-84035CVSS 9.8 criticalEPSS 0.38%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due…

  18. CVE-2026-84032CVSS 8.1 highEPSS 0.16%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due t…

  19. CVE-2026-82900CVSS 9.1 criticalEPSS 0.38%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to…

  20. CVE-2026-82895CVSS 9.8 criticalEPSS 0.38%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due…

  21. CVE-2026-82344CVSS 9.8 criticalEPSS 0.40%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap…

  22. CVE-2026-82335CVSS 9.8 criticalEPSS 0.38%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB pr…

  23. CVE-2026-82334CVSS 9.1 criticalEPSS 0.30%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LO…

  24. CVE-2026-81932CVSS 9.8 criticalEPSS 0.29%2026-10-08

    guardium data protection. IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated at…

  25. CVE-2026-78388CVSS 8.8 highEPSS 0.11%2026-10-08

    security verify access. IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulner…

  26. CVE-2026-19498CVSS 7.5 highEPSS 0.28%2026-10-08

    security verify access. IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could all…

  27. CVE-2026-19491CVSS 7.5 highEPSS 0.33%2026-10-08

    security verify access. IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could all…

  28. CVE-2026-16916CVSS 8.8 highEPSS 0.42%2026-10-08

    security verify access. IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could all…

  29. CVE-2026-16823CVSS 7.5 highEPSS 0.33%2026-10-08

    security verify access. IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could all…

  30. CVE-2026-14999CVSS 7.5 highEPSS 0.19%2026-10-08

    datapower gateway. IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0…

  31. CVE-2026-14988CVSS 9.8 criticalEPSS 0.26%2026-10-08

    datapower gateway. IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0…

  32. CVE-2026-14888CVSS 9.8 criticalEPSS 0.38%2026-10-08

    datapower gateway. IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0…

  33. CVE-2026-14508CVSS 9.1 criticalEPSS 0.27%2026-10-08

    datapower gateway. IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0…

  34. CVE-2026-12109CVSS 7.2 highEPSS 0.21%2026-10-08

    security verify access. IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could all…

  35. CVE-2026-11930CVSS 7.5 highEPSS 0.19%2026-10-08

    security verify access. IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not e…

  36. CVE-2026-11888CVSS 7.5 highEPSS 0.17%2026-10-08

    security verify access. IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulner…

  37. CVE-2026-84440CVSS 8.8 highEPSS 0.74%2026-09-29

    guardium data protection. IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functiona…

  38. CVE-2026-82094CVSS 7.1 highEPSS 0.31%2026-09-24

    datastage on cloud pak for data. IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directori…

  39. CVE-2026-82093CVSS 8.8 highEPSS 0.42%2026-09-24

    datastage on cloud pak for data. IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary…

  40. CVE-2026-81552CVSS 8.8 highEPSS 0.77%2026-09-24

    datastage on cloud pak for data. IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary…

  41. CVE-2026-81549CVSS 7.7 highEPSS 0.26%2026-09-24

    datastage on cloud pak for data. IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive i…

  42. CVE-2026-81545CVSS 8.8 highEPSS 0.88%2026-09-24

    datastage on cloud pak for data. IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary…

  43. CVE-2026-81539CVSS 8.8 highEPSS 0.45%2026-09-24

    datastage on cloud pak for data. IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary…

  44. CVE-2026-6730CVSS 7.8 highEPSS 0.30%2026-09-23

    concert. IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A loc…

  45. CVE-2026-18154CVSS 7.5 highEPSS 0.26%2026-09-22

    financial transaction manager. IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitiv…

  46. CVE-2026-18153CVSS 7.1 highEPSS 0.15%2026-09-22

    financial transaction manager. IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to o…

  47. CVE-2026-18152CVSS 7.5 highEPSS 0.18%2026-09-22

    financial transaction manager. IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-s…

  48. CVE-2026-18134CVSS 7.5 highEPSS 0.20%2026-09-22

    financial transaction manager. IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitiv…

  49. CVE-2026-18123CVSS 7.5 highEPSS 0.26%2026-09-22

    financial transaction manager. IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial…

  50. CVE-2026-18114CVSS 7.5 highEPSS 0.43%2026-09-22

    financial transaction manager. IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read arbitrary…