Search
Find a vulnerability
Search criteria
20352 vulnerabilities by IBM
CVE-2026-9825 (GCVE-0-2026-9825)
Vulnerability from nvd – Published: 2026-10-20 22:02 – Updated: 2026-10-21 15:35
VLAI
EPSS
VEX
Title
IBM Cyber Fraud Reachable Assertion
Summary
IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 15:35 UTC
CWE
- CWE-617 - Reachable Assertion
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290671 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | CyberFraud |
Affected:
1.0.0 , ≤ 1.0.2
(semver)
cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cyber_fraud:1.0.2:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-9825",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T15:35:47.899908Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T15:35:58.392Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:cyber_fraud:1.0.2:*:*:*:*:*:*:*"
],
"product": "CyberFraud",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.0.2",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.\u003c/p\u003e"
}
],
"value": "IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-617",
"description": "CWE-617 Reachable Assertion",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T22:02:54.216Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290671"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly encourages customers to update their systems promptly.\u003c/p\u003e\u003cp\u003ePlease upgrade to at least version 1.1.0 according to the following instructions:\u003cbr/\u003e\u003cbr/\u003e\u003ca href=\"https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud\" rel=\"noopener noreferrer nofollow\"\u003ehttps://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud\" rel=\"noopener noreferrer nofollow\"\u003ehttps://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud\u003c/a\u003e\u003c/p\u003e"
}
],
"value": "IBM strongly encourages customers to update their systems promptly.\n\n\n\nPlease upgrade to at least version 1.1.0 according to the following instructions:\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud \n\n\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud"
}
],
"title": "IBM Cyber Fraud Reachable Assertion"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-9825",
"datePublished": "2026-10-20T22:02:54.216Z",
"dateReserved": "2026-05-28T11:36:30.290Z",
"dateUpdated": "2026-10-21T15:35:58.392Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-94402 (GCVE-0-2026-94402)
Vulnerability from nvd – Published: 2026-10-20 21:31 – Updated: 2026-10-20 21:31
VLAI
EPSS
VEX
Title
IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation
Summary
IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle() function re-inserts a substring of user-supplied label text into the DOM via an unsanitized innerHTML write when the title exceeds the available container width. A remote attacker could exploit this vulnerability to execute arbitrary JavaScript in the victim's browser session.
Severity
6.1 (Medium)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7291785 | vendor-advisorypatch |
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | @carbon/charts |
Affected:
0.4.0 , ≤ 1.27.19
(semver)
cpe:2.3:a:ibm:carbon_charts:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:carbon_charts:1.27.19:*:*:*:*:*:*:* |
|
| IBM | @carbon/charts-react |
Affected:
0.4.0 , ≤ 1.27.19
(semver)
cpe:2.3:a:ibm:carboncharts_react:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:carboncharts_react:1.27.19:*:*:*:*:*:*:* |
|
| IBM | @carbon/charts-angular |
Affected:
0.4.0 , ≤ 1.27.19
(semver)
cpe:2.3:a:ibm:carboncharts_angular:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:carboncharts_angular:1.27.19:*:*:*:*:*:*:* |
|
| IBM | @carbon/charts-vue |
Affected:
0.4.0 , ≤ 1.27.19
(semver)
cpe:2.3:a:ibm:carboncharts_vue:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:carboncharts_vue:1.27.19:*:*:*:*:*:*:* |
|
| IBM | @carbon/charts-svelte |
Affected:
0.4.0 , ≤ 1.27.19
(semver)
cpe:2.3:a:ibm:carboncharts_svelte:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:carboncharts_svelte:1.27.19:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:carbon_charts:0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:carbon_charts:1.27.19:*:*:*:*:*:*:*"
],
"product": "@carbon/charts",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.27.19",
"status": "affected",
"version": "0.4.0",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:carboncharts_react:0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:carboncharts_react:1.27.19:*:*:*:*:*:*:*"
],
"product": "@carbon/charts-react",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.27.19",
"status": "affected",
"version": "0.4.0",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:carboncharts_angular:0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:carboncharts_angular:1.27.19:*:*:*:*:*:*:*"
],
"product": "@carbon/charts-angular",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.27.19",
"status": "affected",
"version": "0.4.0",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:carboncharts_vue:0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:carboncharts_vue:1.27.19:*:*:*:*:*:*:*"
],
"product": "@carbon/charts-vue",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.27.19",
"status": "affected",
"version": "0.4.0",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:carboncharts_svelte:0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:carboncharts_svelte:1.27.19:*:*:*:*:*:*:*"
],
"product": "@carbon/charts-svelte",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.27.19",
"status": "affected",
"version": "0.4.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component\u0027s Title.truncateTitle() function re-inserts a substring of user-supplied label text into the DOM via an unsanitized innerHTML write when the title exceeds the available container width. A remote attacker could exploit this vulnerability to execute arbitrary JavaScript in the victim\u0027s browser session.\u003c/p\u003e"
}
],
"value": "IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component\u0027s Title.truncateTitle() function re-inserts a substring of user-supplied label text into the DOM via an unsanitized innerHTML write when the title exceeds the available container width. A remote attacker could exploit this vulnerability to execute arbitrary JavaScript in the victim\u0027s browser session."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:31:46.027Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7291785"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003ePlease update the library to the\u00a0latest version\u00a0available on npm:\u00a0\u003ca href=\"https://www.npmjs.com/package/@carbon/charts\" rel=\"nofollow\"\u003ehttps://www.npmjs.com/package/@carbon/charts\u003c/a\u003e\u003c/p\u003e"
}
],
"value": "Please update the library to the\u00a0latest version\u00a0available on npm:\u00a0 https://www.npmjs.com/package/@carbon/charts"
}
],
"title": "IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIf an immediate upgrade to v1.27.20 is not possible, consuming applications should sanitize all user-influenced strings before passing them as data[0].group (or any label field) to a MeterChart. A DOMPurify call with ALLOWED_TAGS: [] applied to the value before it reaches the chart data will neutralize the payload. This is a temporary workaround only \u2014 upgrading to v1.27.20 remains the recommended remediation.\u003c/p\u003e"
}
],
"value": "If an immediate upgrade to v1.27.20 is not possible, consuming applications should sanitize all user-influenced strings before passing them as data[0].group (or any label field) to a MeterChart. A DOMPurify call with ALLOWED_TAGS: [] applied to the value before it reaches the chart data will neutralize the payload. This is a temporary workaround only \u2014 upgrading to v1.27.20 remains the recommended remediation."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-94402",
"datePublished": "2026-10-20T21:31:46.027Z",
"dateReserved": "2026-09-21T13:43:42.740Z",
"dateUpdated": "2026-10-20T21:31:46.027Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-93888 (GCVE-0-2026-93888)
Vulnerability from nvd – Published: 2026-10-20 21:39 – Updated: 2026-10-21 15:38
VLAI
EPSS
VEX
Title
IBM Sterling Connect:Direct for Unix Buffer Overflow
Summary
IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 15:38 UTC
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292127 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Sterling Connect Direct for Unix |
Affected:
6.4.0.0 , ≤ 6.4.0.6
(semver)
Affected: 6.3.0.0 , ≤ 6.3.0.7 (semver) cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:*:*:*:*:unix:*:* cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:*:*:*:*:unix:*:* cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:*:*:*:*:unix:*:* cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:*:*:*:*:unix:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-93888",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T15:38:00.162733Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T15:38:13.763Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:*:*:*:*:unix:*:*",
"cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:*:*:*:*:unix:*:*",
"cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:*:*:*:*:unix:*:*",
"cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:*:*:*:*:unix:*:*"
],
"product": "Sterling Connect Direct for Unix",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "6.4.0.6",
"status": "affected",
"version": "6.4.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.3.0.7",
"status": "affected",
"version": "6.3.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility\u0026nbsp;is vulnerable to a code injection due to insufficient validation of user input.\u003c/p\u003e"
}
],
"value": "IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility\u00a0is vulnerable to a code injection due to insufficient validation of user input."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:39:48.421Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292127"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct\u003c/td\u003e\u003ctd\u003eVersion\u003c/td\u003e\u003ctd\u003eRemediation/Fix/Instructions\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Sterling Connect:Direct for Unix\u003c/td\u003e\u003ctd\u003e6.4.0.0 - 6.4.0.6.iFix021\u003c/td\u003e\u003ctd\u003eApply 6.4.0.6.iFix022, included in 6.4.0.6.iFix025 available on \u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software\u0026amp;product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX\u0026amp;release=6.4.0.6\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=6.4.0.6*iFix025*\u0026amp;includeSupersedes=0\" rel=\"noopener noreferrer nofollow\"\u003eFix Central\u003c/a\u003e.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Sterling Connect:Direct for Unix\u003c/td\u003e\u003ctd\u003e6.3.0.0 - 6.3.0.7.iFix032\u003c/td\u003e\u003ctd\u003eApply 6.3.0.7.iFix033, available on \u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software\u0026amp;product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX\u0026amp;release=6.3.0.7\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=6.3.0.7*iFix033*\u0026amp;includeSupersedes=0\" rel=\"noopener noreferrer nofollow\"\u003eFix Central\u003c/a\u003e.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\n\nProductVersionRemediation/Fix/InstructionsIBM Sterling Connect:Direct for Unix6.4.0.0 - 6.4.0.6.iFix021Apply 6.4.0.6.iFix022, included in 6.4.0.6.iFix025 available on Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .IBM Sterling Connect:Direct for Unix6.3.0.0 - 6.3.0.7.iFix032Apply 6.3.0.7.iFix033, available on Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes ."
}
],
"title": "IBM Sterling Connect:Direct for Unix Buffer Overflow"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-93888",
"datePublished": "2026-10-20T21:39:48.421Z",
"dateReserved": "2026-09-18T20:18:47.997Z",
"dateUpdated": "2026-10-21T15:38:13.763Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-93744 (GCVE-0-2026-93744)
Vulnerability from nvd – Published: 2026-10-20 21:41 – Updated: 2026-10-21 15:51
VLAI
EPSS
VEX
Title
IBM i Improper Authentication
Summary
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability to alter server-side session security state.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 14:40 UTC
CWE
- CWE-287 - Improper Authentication
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292223 | vendor-advisorypatch |
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-93744",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T14:40:29.274998Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T15:51:48.687Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*"
],
"product": "i",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "7.6"
},
{
"status": "affected",
"version": "7.5"
},
{
"status": "affected",
"version": "7.4"
},
{
"status": "affected",
"version": "7.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability to alter server-side session security state.\u003c/p\u003e"
}
],
"value": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability to alter server-side session security state."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287 Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:41:32.677Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292223"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003e\u003ctable\u003e\u003ccolgroup\u003e\u003ccol/\u003e\u003ccol/\u003e\u003ccol/\u003e\u003c/colgroup\u003e\u003cthead\u003e\u003ctr\u003e\u003ctd\u003e\u003cstrong\u003eIBM i Release\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003e5770-SS1 Option 3\u00a0\u003cbr/\u003ePTF Number(s)\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003ePTF Download Link(s)\u003c/strong\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e7.6\u003c/td\u003e\u003ctd\u003eSJ11740\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11740\" rel=\"nofollow\"\u003ehttps://www.ibm.com/mysupport/s/fix-information?legacy=SJ11740\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e7.5\u003c/td\u003e\u003ctd\u003eSJ11745\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11745\" rel=\"nofollow\"\u003ehttps://www.ibm.com/mysupport/s/fix-information?legacy=SJ11745\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e7.4\u003c/td\u003e\u003ctd\u003eSJ11746\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11746\" rel=\"nofollow\"\u003ehttps://www.ibm.com/mysupport/s/fix-information?legacy=SJ11746\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e7.3\u003c/td\u003e\u003ctd\u003eSJ11747\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11747\" rel=\"nofollow\"\u003ehttps://www.ibm.com/mysupport/s/fix-information?legacy=SJ11747\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003eIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.\u003c/p\u003e"
}
],
"value": "IBM i Release5770-SS1 Option 3\u00a0\nPTF Number(s)PTF Download Link(s)7.6SJ11740 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11740 7.5SJ11745 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11745 7.4SJ11746 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11746 7.3SJ11747 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11747 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products."
}
],
"title": "IBM i Improper Authentication"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-93744",
"datePublished": "2026-10-20T21:41:32.677Z",
"dateReserved": "2026-09-18T16:03:13.170Z",
"dateUpdated": "2026-10-21T15:51:48.687Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-93442 (GCVE-0-2026-93442)
Vulnerability from nvd – Published: 2026-10-20 21:48 – Updated: 2026-10-21 15:37
VLAI
EPSS
VEX
Title
IBM QRadar SIEM Out-of-bounds Read
Summary
IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.
Severity
8.2 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 15:37 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292240 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | QRadar |
Affected:
7.6.0.0 , ≤ 7.6.0.4
(semver)
Affected: 7.5.0 , ≤ 7.5.0 Update Package 16 Interim Fix 001 (semver) cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.6.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.6.0.4:*:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_package_16_interim_fix_001:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-93442",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T15:37:05.507010Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T15:37:13.506Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.6.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.6.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_package_16_interim_fix_001:*:*:*:*:*:*"
],
"product": "QRadar",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "7.6.0.4",
"status": "affected",
"version": "7.6.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.5.0 Update Package 16 Interim Fix 001",
"status": "affected",
"version": "7.5.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.\u003c/p\u003e"
}
],
"value": "IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:48:25.321Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292240"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly encourages customers to update their systems promptly.\u003c/p\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct\u003c/td\u003e\u003ctd\u003eVersion\u003c/td\u003e\u003ctd\u003eFix\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM QRadar SIEM\u003c/td\u003e\u003ctd\u003e7.6.0\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/pages/node/7288897\" rel=\"nofollow\"\u003e7.6.0.5\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM QRadar SIEM\u003c/td\u003e\u003ctd\u003e7.5.0\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/pages/node/7289152\" rel=\"nofollow\"\u003e7.5.0 UP16 IF02\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly encourages customers to update their systems promptly.\n\nProductVersionFixIBM QRadar SIEM7.6.0 7.6.0.5 https://www.ibm.com/support/pages/node/7288897 IBM QRadar SIEM7.5.0 7.5.0 UP16 IF02 https://www.ibm.com/support/pages/node/7289152"
}
],
"title": "IBM QRadar SIEM Out-of-bounds Read"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-93442",
"datePublished": "2026-10-20T21:48:03.902Z",
"dateReserved": "2026-09-17T22:05:34.817Z",
"dateUpdated": "2026-10-21T15:37:13.506Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-93441 (GCVE-0-2026-93441)
Vulnerability from nvd – Published: 2026-10-20 21:51 – Updated: 2026-10-20 21:51
VLAI
EPSS
VEX
Title
IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service
Summary
IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
Severity
8.6 (High)
CWE
- CWE-400 - Uncontrolled Resource Consumption
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292244 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | QRadar Security Information and Event Management |
Affected:
7.4-20210823144546 , ≤ 7.5-20260930064858
(custom)
Affected: 7.6-20260330053257 , ≤ 7.6-20260930064910 (custom) cpe:2.3:a:ibm:qradar_security_information_and_event_management:http:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:qradar_security_information_and_event_management:http:*:*:*:*:*:*:*"
],
"product": "QRadar Security Information and Event Management",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "7.5-20260930064858",
"status": "affected",
"version": "7.4-20210823144546",
"versionType": "custom"
},
{
"lessThanOrEqual": "7.6-20260930064910",
"status": "affected",
"version": "7.6-20260330053257",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.\u003c/p\u003e"
}
],
"value": "IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400 Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:51:16.499Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292244"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly encourages customers to update their systems promptly.\u003c/p\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct\u003c/td\u003e\u003ctd\u003eProtocol\u003c/td\u003e\u003ctd\u003eVersion\u003c/td\u003e\u003ctd\u003eFix\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM QRadar SIEM\u003c/td\u003e\u003ctd\u003eHTTP Receiver\u003c/td\u003e\u003ctd\u003e\u00a07.5\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security\u0026amp;product=ibm/Other+software/IBM+Security+QRadar+SIEM\u0026amp;release=All\u0026amp;platform=Linux\u0026amp;function=fixId\u0026amp;fixids=7.5.0-QRADAR-DSM-JuniperJunOS-7.5-20260826070157.noarch.rpm,7.5.0-QRADAR-PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm,7.6.0-QRADAR-DSM-CitrixNetScaler-7.6-20261005125714.noarch.rpm,7.6.0-QRADAR-DSM-ArubaMobility-7.6-20261005061312.noarch.rpm,7.6.0-QRADAR-DSM-JuniperJunOS-7.6-20260826070207.noarch.rpm,7.6.0-QRADAR-DSM-CiscoMeraki-7.6-20260908194712.noarch.rpm,7.5.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.5-20260928060353.noarch.rpm,7.6.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.6-20260928060405.noarch.rpm,7.5.0-QRADAR-DSM-CiscoMeraki-7.5-20260908194704.noarch.rpm,7.5.0-QRADAR-DSM-CiscoIronPort-7.5-20260928155658.noarch.rpm,7.6.0-QRADAR-PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm,7.5.0-QRADAR-DSM-ArubaMobility-7.5-20261003162837.noarch.rpm,7.6.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.6-20260813063016.noarch.rpm,7.6.0-QRADAR-DSM-CiscoIronPort-7.6-20260929090932.noarch.rpm,7.5.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.5-20260811152834.noarch.rpm,7.5.0-QRADAR-DSM-CitrixNetScaler-7.5-20261005110756.noarch.rpm\u0026amp;includeSupersedes=0\u0026amp;source=fc\" rel=\"nofollow\"\u003ePROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM QRadar SIEM\u003c/td\u003e\u003ctd\u003eHTTP Receiver\u003c/td\u003e\u003ctd\u003e\u00a07.6\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security\u0026amp;product=ibm/Other+software/IBM+Security+QRadar+SIEM\u0026amp;release=All\u0026amp;platform=Linux\u0026amp;function=fixId\u0026amp;fixids=7.5.0-QRADAR-DSM-JuniperJunOS-7.5-20260826070157.noarch.rpm,7.5.0-QRADAR-PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm,7.6.0-QRADAR-DSM-CitrixNetScaler-7.6-20261005125714.noarch.rpm,7.6.0-QRADAR-DSM-ArubaMobility-7.6-20261005061312.noarch.rpm,7.6.0-QRADAR-DSM-JuniperJunOS-7.6-20260826070207.noarch.rpm,7.6.0-QRADAR-DSM-CiscoMeraki-7.6-20260908194712.noarch.rpm,7.5.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.5-20260928060353.noarch.rpm,7.6.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.6-20260928060405.noarch.rpm,7.5.0-QRADAR-DSM-CiscoMeraki-7.5-20260908194704.noarch.rpm,7.5.0-QRADAR-DSM-CiscoIronPort-7.5-20260928155658.noarch.rpm,7.6.0-QRADAR-PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm,7.5.0-QRADAR-DSM-ArubaMobility-7.5-20261003162837.noarch.rpm,7.6.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.6-20260813063016.noarch.rpm,7.6.0-QRADAR-DSM-CiscoIronPort-7.6-20260929090932.noarch.rpm,7.5.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.5-20260811152834.noarch.rpm,7.5.0-QRADAR-DSM-CitrixNetScaler-7.5-20261005110756.noarch.rpm\u0026amp;includeSupersedes=0\u0026amp;source=fc\" rel=\"nofollow\"\u003ePROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003c/div\u003e\u003cp\u003eThese RPMs will be updated as part of \u003ca href=\"https://www.ibm.com/docs/en/qsip/7.6.0?topic=tasks-automatic-updates\" rel=\"noopener noreferrer nofollow\"\u003eQRadar Auto Update\u003c/a\u003e where enabled.\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly encourages customers to update their systems promptly.\n\nProductProtocolVersionFixIBM QRadar SIEMHTTP Receiver\u00a07.5 PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes IBM QRadar SIEMHTTP Receiver\u00a07.6 PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes \n\n\n\n\n\nThese RPMs will be updated as part of QRadar Auto Update https://www.ibm.com/docs/en/qsip/7.6.0 where enabled."
}
],
"title": "IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-93441",
"datePublished": "2026-10-20T21:51:16.499Z",
"dateReserved": "2026-09-17T22:03:39.454Z",
"dateUpdated": "2026-10-20T21:51:16.499Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-92559 (GCVE-0-2026-92559)
Vulnerability from nvd – Published: 2026-10-20 21:52 – Updated: 2026-10-20 21:52
VLAI
EPSS
VEX
Title
IBM App Connect Enterprise is vulnerable to a credential exposure
Summary
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.
Severity
9.8 (Critical)
CWE
- CWE-1327 - Binding to an Unrestricted IP Address
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7291781 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | App Connect Enterprise |
Affected:
13.0.1.0 , ≤ 13.0.8.2
(semver)
cpe:2.3:a:ibm:app_connect_enterprise:13.0.1.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:app_connect_enterprise:13.0.1.0:*:*:*:*:*:*:*"
],
"product": "App Connect Enterprise",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "13.0.8.2",
"status": "affected",
"version": "13.0.1.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.\u003c/p\u003e"
}
],
"value": "IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1327",
"description": "CWE-1327 Binding to an Unrestricted IP Address",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:52:22.560Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7291781"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerability/vulnerabilities now by applying the appropriate fix to IBM App Connect Enterprise\u003c/strong\u003e\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ccolgroup\u003e\u003ccol/\u003e\u003ccol/\u003e\u003ccol/\u003e\u003ccol/\u003e\u003c/colgroup\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eAffected Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003ctd\u003eAPAR\u003c/td\u003e\u003ctd\u003eRemediation / Fixes\u00a0\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM App Connect Enterprise\u003c/td\u003e\u003ctd\u003e13.0.1.0 - 13.0.8.2\u003c/td\u003e\u003ctd\u003eIT50100\u003c/td\u003e\u003ctd\u003e\u003cp\u003eThe APAR (IT50100) is available from\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/pages/download-ibm-app-connect-enterprise-13090\" rel=\"noopener noreferrer nofollow\"\u003eIBM App Connect Enterprise v13- Fix Pack Release 13.0.9.0\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability/vulnerabilities now by applying the appropriate fix to IBM App Connect Enterprise\n\nAffected Product(s)Version(s)APARRemediation / Fixes\u00a0IBM App Connect Enterprise13.0.1.0 - 13.0.8.2IT50100\n\nThe APAR (IT50100) is available from\n\n\n\n IBM App Connect Enterprise v13- Fix Pack Release 13.0.9.0 https://www.ibm.com/support/pages/download-ibm-app-connect-enterprise-13090"
}
],
"title": "IBM App Connect Enterprise is vulnerable to a credential exposure"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-92559",
"datePublished": "2026-10-20T21:52:22.560Z",
"dateReserved": "2026-09-16T13:25:30.418Z",
"dateUpdated": "2026-10-20T21:52:22.560Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87800 (GCVE-0-2026-87800)
Vulnerability from nvd – Published: 2026-10-20 21:53 – Updated: 2026-10-21 15:51
VLAI
EPSS
VEX
Title
IBM Cyber Fraud includes components with multiple known vulnerabilities
Summary
IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.
Severity
6.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 14:24 UTC
CWE
- CWE-434 - Unrestricted Upload of File with Dangerous Type
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290671 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Cyber Fraud |
Affected:
1.0.0 , ≤ 1.0.2
(semver)
cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cyber_fraud:1.0.2:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87800",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T14:24:50.386765Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T15:51:39.236Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:cyber_fraud:1.0.2:*:*:*:*:*:*:*"
],
"product": "Cyber Fraud",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.0.2",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.\u003c/p\u003e"
}
],
"value": "IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-434",
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:54:29.497Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290671"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly encourages customers to update their systems promptly.\u003c/p\u003e\u003cp\u003ePlease upgrade to at least version 1.1.0 according to the following instructions:\u003cbr/\u003e\u003cbr/\u003e\u003ca href=\"https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud\" rel=\"noopener noreferrer nofollow\"\u003ehttps://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud\" rel=\"noopener noreferrer nofollow\"\u003ehttps://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud\u003c/a\u003e\u003c/p\u003e"
}
],
"value": "IBM strongly encourages customers to update their systems promptly.\n\n\n\nPlease upgrade to at least version 1.1.0 according to the following instructions:\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud \n\n\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud"
}
],
"title": "IBM Cyber Fraud includes components with multiple known vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-87800",
"datePublished": "2026-10-20T21:53:18.569Z",
"dateReserved": "2026-09-09T10:02:11.467Z",
"dateUpdated": "2026-10-21T15:51:39.236Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82891 (GCVE-0-2026-82891)
Vulnerability from nvd – Published: 2026-10-20 21:55 – Updated: 2026-10-20 21:55
VLAI
EPSS
VEX
Title
IBM Guardium Data Protection is affected by a security vulnerability
Summary
IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.
Severity
8.1 (High)
CWE
- CWE-321 - Use of Hard-coded Cryptographic Key
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7293014 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Guardium Data Protection |
Affected:
12.1
Affected: 12.2 cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:*"
],
"product": "Guardium Data Protection",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "12.1"
},
{
"status": "affected",
"version": "12.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.\u003c/p\u003e"
}
],
"value": "IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-321",
"description": "CWE-321 Use of Hard-coded Cryptographic Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:55:01.289Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7293014"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cp\u003e\u003cstrong\u003eIBM encourages customers to update their systems promptly.\u003c/strong\u003e\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003cdiv\u003e\u003cdiv\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cstrong\u003e\u00a0Product\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003eVersions\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003e\u00a0Fix\u003c/strong\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Guardium Data Protection\u003c/td\u003e\u003ctd\u003e12.1\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security\u0026amp;product=ibm/Information+Management/InfoSphere+Guardium\u0026amp;release=All\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=SqlGuard_12.0p150_Bundle\u0026amp;includeSupersedes=0\u0026amp;source=fc\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security\u0026amp;product=ibm/Information+Management/InfoSphere+Guardium\u0026amp;release=All\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=SqlGuard_12.0p150_Bundle\u0026amp;includeSupersedes=0\u0026amp;source=fc\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Guardium Data Protection\u003c/td\u003e\u003ctd\u003e12.2\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security\u0026amp;product=ibm/Information+Management/InfoSphere+Guardium\u0026amp;release=12.2\u0026amp;platform=Linux\u0026amp;function=fixId\u0026amp;fixids=SqlGuard_12.0p233_FixPack\u0026amp;includeSupersedes=0\u0026amp;source=fc\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security\u0026amp;product=ibm/Information+Management/InfoSphere+Guardium\u0026amp;release=12.2\u0026amp;platform=Linux\u0026amp;function=fixId\u0026amp;fixids=SqlGuard_12.0p233_FixPack\u0026amp;includeSupersedes=0\u0026amp;source=fc\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e"
}
],
"value": "IBM encourages customers to update their systems promptly.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\u00a0ProductVersions\u00a0FixIBM Guardium Data Protection12.1 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security\u0026product=ibm/Information+Management/InfoSphere+Guardium\u0026release=All\u0026platform=All\u0026function=fixId\u0026fixids=SqlGuard_12.0p150_Bundle\u0026includeSupersedes=0\u0026source=fc IBM Guardium Data Protection12.2 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security\u0026product=ibm/Information+Management/InfoSphere+Guardium\u0026release=12.2\u0026platform=Linux\u0026function=fixId\u0026fixids=SqlGuard_12.0p233_FixPack\u0026includeSupersedes=0\u0026source=fc"
}
],
"title": "IBM Guardium Data Protection is affected by a security vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-82891",
"datePublished": "2026-10-20T21:55:01.289Z",
"dateReserved": "2026-08-31T09:12:21.427Z",
"dateUpdated": "2026-10-20T21:55:01.289Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-81212 (GCVE-0-2026-81212)
Vulnerability from nvd – Published: 2026-10-20 21:58 – Updated: 2026-10-20 21:58
VLAI
EPSS
VEX
Title
DataStage on Cloud Pak for Data Improper Authorization
Summary
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller poison any tenant's cached flow parameters.
Severity
10 (Critical)
CWE
- CWE-285 - Improper Authorization
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7289603 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | DataStage on Cloud Pak for Data |
Affected:
5.4.0.0
cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.4.0.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.4.0.0:*:*:*:*:*:*:*"
],
"product": "DataStage on Cloud Pak for Data",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "5.4.0.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant\u0027s key. This collapses the platform\u0027s credential-encryption boundary and lets an anonymous caller poison any tenant\u0027s cached flow parameters.\u003c/p\u003e"
}
],
"value": "IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant\u0027s key. This collapses the platform\u0027s credential-encryption boundary and lets an anonymous caller poison any tenant\u0027s cached flow parameters."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "CWE-285 Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:58:51.662Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7289603"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003e\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerability now by upgrading DataStage on Cloud Pak for Data.\u003c/strong\u003e\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct(s)\u003c/td\u003e\u003ctd\u003eVersion(s) number and/or range\u00a0\u003c/td\u003e\u003ctd\u003eRemediation/Fix/Instructions\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eDataStage on Cloud Pak for Data\u003c/td\u003e\u003ctd\u003e5.4.0.0\u003c/td\u003e\u003ctd\u003e\u003cp\u003eUpgrade to 5.4 patch 8 or later by following these \u003ca href=\"https://www.ibm.com/docs/en/software-hub/5.4.x?topic=overview-available-patches-software-hub-version-540\" rel=\"nofollow\"\u003einstructions\u003c/a\u003e.\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading DataStage on Cloud Pak for Data.\n\nProduct(s)Version(s) number and/or range\u00a0Remediation/Fix/InstructionsDataStage on Cloud Pak for Data5.4.0.0\n\nUpgrade to 5.4 patch 8 or later by following these instructions https://www.ibm.com/docs/en/software-hub/5.4.x ."
}
],
"title": "DataStage on Cloud Pak for Data Improper Authorization"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-81212",
"datePublished": "2026-10-20T21:58:51.662Z",
"dateReserved": "2026-08-26T17:04:33.191Z",
"dateUpdated": "2026-10-20T21:58:51.662Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76587 (GCVE-0-2026-76587)
Vulnerability from nvd – Published: 2026-10-20 22:07 – Updated: 2026-10-20 22:07
VLAI
EPSS
VEX
Title
IBM Planning Analytics Buffer Overflow
Summary
IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.
Severity
8.8 (High)
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7291604 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Planning Analytics |
Affected:
2.0
Affected: 2.1 cpe:2.3:a:ibm:planning_analytics:2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:planning_analytics:2.0:*:*:*:*:*:*:*"
],
"product": "Planning Analytics",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "2.0"
},
{
"status": "affected",
"version": "2.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper\u0026nbsp;bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.\u003c/p\u003e"
}
],
"value": "IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper\u00a0bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T22:07:47.557Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7291604"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIt is strongly recommended that you apply the most recent security updates:\u00a0\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eAffected Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003ctd\u003eFix\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Planning Analytics Local\u003c/td\u003e\u003ctd\u003e2.1.0 - 2.1.23\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://w3.ibm.com/w3publisher/capa-release-announcements/2026-releases/pa-2026-releases\" rel=\"nofollow\"\u003eIBM Planning Analytics Local 2.1.24 is now available for download from Fix Central\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003eIBM Planning Analytics Cloud environment has been remediated.\u003c/p\u003e"
}
],
"value": "It is strongly recommended that you apply the most recent security updates:\u00a0\n\nAffected Product(s)Version(s)FixIBM Planning Analytics Local2.1.0 - 2.1.23 IBM Planning Analytics Local 2.1.24 is now available for download from Fix Central https://w3.ibm.com/w3publisher/capa-release-announcements/2026-releases/pa-2026-releases \n\n\n\nIBM Planning Analytics Cloud environment has been remediated."
}
],
"title": "IBM Planning Analytics Buffer Overflow"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-76587",
"datePublished": "2026-10-20T22:07:47.557Z",
"dateReserved": "2026-08-19T14:24:55.165Z",
"dateUpdated": "2026-10-20T22:07:47.557Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-8355 (GCVE-0-2026-8355)
Vulnerability from nvd – Published: 2026-10-19 23:42 – Updated: 2026-10-20 14:37
VLAI
EPSS
VEX
Title
IBM ContextForge MCP Gateway is affected by server-side request forgery
Summary
IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during OAuth-enabled gateway registration when the system fails to validate the oauth_config.token_url parameter. When registering a gateway with OAuth client credentials authentication, an attacker can supply a malicious token_url pointing to internal services, cloud metadata endpoints (AWS IMDSv1, GCP, Azure), or localhost-bound services. The application immediately performs an HTTP POST request to the attacker-controlled URL with form-encoded credentials in the body. If the response cannot be parsed as a valid OAuth token response, up to 256 characters of the response body are reflected back to the attacker in the HTTP 502 error message. This vulnerability bypasses existing SSRF protections that are applied to the gateway.url field but not to OAuth configuration parameters.
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-20 14:37 UTC
CWE
- CWE-918 - Server-Side request forgery (SSRF)
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7285723 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | ContextForge MCP Gateway |
Affected:
0.1.0 , ≤ 1.0.5
(semver)
cpe:2.3:a:ibm:contextforge_mcp_gateway:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-8355",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-20T14:37:11.981399Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T14:37:15.968Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "ContextForge MCP Gateway",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.0.5",
"status": "affected",
"version": "0.1.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:contextforge_mcp_gateway:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.0.5",
"versionStartIncluding": "0.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during OAuth-enabled gateway registration when the system fails to validate the oauth_config.token_url parameter. When registering a gateway with OAuth client credentials authentication, an attacker can supply a malicious token_url pointing to internal services, cloud metadata endpoints (AWS IMDSv1, GCP, Azure), or localhost-bound services. The application immediately performs an HTTP POST request to the attacker-controlled URL with form-encoded credentials in the body. If the response cannot be parsed as a valid OAuth token response, up to 256 characters of the response body are reflected back to the attacker in the HTTP 502 error message. This vulnerability bypasses existing SSRF protections that are applied to the gateway.url field but not to OAuth configuration parameters.\u003c/p\u003e"
}
],
"value": "IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during OAuth-enabled gateway registration when the system fails to validate the oauth_config.token_url parameter. When registering a gateway with OAuth client credentials authentication, an attacker can supply a malicious token_url pointing to internal services, cloud metadata endpoints (AWS IMDSv1, GCP, Azure), or localhost-bound services. The application immediately performs an HTTP POST request to the attacker-controlled URL with form-encoded credentials in the body. If the response cannot be parsed as a valid OAuth token response, up to 256 characters of the response body are reflected back to the attacker in the HTTP 502 error message. This vulnerability bypasses existing SSRF protections that are applied to the gateway.url field but not to OAuth configuration parameters."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918 Server-Side request forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T23:42:01.778Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7285723"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerability now.\u003c/strong\u003e\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cstrong\u003eProduct(s)\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003eVersion(s) number and/or range\u00a0\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003eRemediation/Fix/Instructions\u003c/strong\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003cdiv\u003e\u003cdiv\u003eIBM ContextForge MCP Gateway\u003c/div\u003e\u003c/div\u003e\u003c/td\u003e\u003ctd\u003e2.0\u0026gt;=v1.0.6\u003c/td\u003e\u003ctd\u003e\u003cdiv\u003e\u003cdiv\u003eUpgrade to v1.0.6 or later. See release notes:\u00a0\u003ca href=\"https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.6%29\" rel=\"nofollow\"\u003ehttps://github.com/IBM/mcp-context-forge/releases/tag/v1.0.6\u003c/a\u003e\u003c/div\u003e\u003c/div\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now.\n\nProduct(s)Version(s) number and/or range\u00a0Remediation/Fix/InstructionsIBM ContextForge MCP Gateway\n\n\n\n2.0\u003e=v1.0.6Upgrade to v1.0.6 or later. See release notes:\u00a0 https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.6 https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.6%29"
}
],
"title": "IBM ContextForge MCP Gateway is affected by server-side request forgery",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003e\u003cdiv\u003eIf an immediate upgrade to v1.0.6 is not possible, restrict access to the gateway registration API:\u003c/div\u003e\u003cbr/\u003e\u003cdiv\u003e- Remove the `gateways.create` permission from the `developer` role or any role assigned to untrusted users.\u003c/div\u003e\u003cdiv\u003e- Enforce network-level egress controls (firewall / security group rules) to block outbound HTTP/HTTPS from the gateway host to cloud metadata addresses (`169.254.254.169/32`, `fd00:ec2::254/128`), RFC 1918 ranges, and loopback (`127.0.0.0/8`).\u003c/div\u003e\u003c/div\u003e\u003cdiv\u003e\u003cdiv\u003eIBM strongly recommends upgrading to the fixed version as soon as possible.\u003c/div\u003e\u003c/div\u003e"
}
],
"value": "If an immediate upgrade to v1.0.6 is not possible, restrict access to the gateway registration API:\n\n\n- Remove the `gateways.create` permission from the `developer` role or any role assigned to untrusted users.\n\n- Enforce network-level egress controls (firewall / security group rules) to block outbound HTTP/HTTPS from the gateway host to cloud metadata addresses (`169.254.254.169/32`, `fd00:ec2::254/128`), RFC 1918 ranges, and loopback (`127.0.0.0/8`).\n\n\n\nIBM strongly recommends upgrading to the fixed version as soon as possible."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-8355",
"datePublished": "2026-10-19T23:42:01.778Z",
"dateReserved": "2026-05-11T17:24:26.842Z",
"dateUpdated": "2026-10-20T14:37:15.968Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-109126 (GCVE-0-2026-109126)
Vulnerability from nvd – Published: 2026-10-19 23:43 – Updated: 2026-10-20 14:35
VLAI
EPSS
VEX
Title
IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials
Summary
IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-20 14:34 UTC
CWE
- CWE-798 - Use of Hard-coded Credentials
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292606 | vendor-advisorypatch |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Verify Identity Access |
Affected:
11.0.3.1
cpe:2.3:a:ibm:verify_identity_access:11.0.3.1:*:*:*:*:*:*:* |
|
| IBM | Security Verify Access |
Affected:
10.0.9.3
cpe:2.3:a:ibm:security_verify_access:10.0.9.3:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-109126",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-20T14:34:59.420118Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T14:35:23.500Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:verify_identity_access:11.0.3.1:*:*:*:*:*:*:*"
],
"product": "Verify Identity Access",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "11.0.3.1"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:security_verify_access:10.0.9.3:*:*:*:*:*:*:*"
],
"product": "Security Verify Access",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "10.0.9.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.\u003c/p\u003e"
}
],
"value": "IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "CWE-798 Use of Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T23:43:19.165Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292606"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003e\u003cstrong\u003eIBM encourages customers to update their systems promptly.\u003c/strong\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003cstrong\u003eAppliance:\u003c/strong\u003e\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003e\u003cstrong\u003eAffected Products\u003c/strong\u003e\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003cstrong\u003eFix availability\u003c/strong\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003eIBM Verify Identity Access\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFix?product=ibm%2FTivoli%2FIBM+Verify+Identity+Access\u0026amp;fixids=11.0.3-ISS-IVIA-FP0002\u0026amp;source=SAR\u0026amp;function=fixId\u0026amp;parent=IBM%20Security\" rel=\"nofollow\"\u003eDownload IBM Verify Identity Access v11.0.3.2\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003eIBM Security Verify Access\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FTivoli%2FIBM+Security+Verify+Access\u0026amp;fixids=10.0.9-ISS-ISVA-FP0004\u0026amp;source=SAR\u0026amp;function=fixId\u0026amp;parent=IBM%20Security\" rel=\"nofollow\"\u003eDownload IBM Security Verify Access v10.0.9.4\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/thead\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e"
}
],
"value": "IBM encourages customers to update their systems promptly.\n\n\n\n\n\n\n\nAppliance:\n\n\n\nAffected Products\n\n\n\nFix availability\n\n\n\nIBM Verify Identity Access\n\n\n\n Download IBM Verify Identity Access v11.0.3.2 https://www.ibm.com/support/fixcentral/swg/selectFix \n\n\n\nIBM Security Verify Access\n\n\n\n Download IBM Security Verify Access v10.0.9.4 https://www.ibm.com/support/fixcentral/swg/selectFixes"
}
],
"title": "IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-109126",
"datePublished": "2026-10-19T23:43:19.165Z",
"dateReserved": "2026-10-12T10:05:10.706Z",
"dateUpdated": "2026-10-20T14:35:23.500Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107400 (GCVE-0-2026-107400)
Vulnerability from nvd – Published: 2026-10-19 23:46 – Updated: 2026-10-20 13:51
VLAI
EPSS
VEX
Title
Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication
Summary
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-20 13:51 UTC
CWE
- CWE-287 - Improper Authentication
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292418 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | TRIRIGA Application Platform |
Affected:
5.0.0 , ≤ 5.0.8
(semver)
cpe:2.3:a:ibm:tririga_application_platform:5.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:tririga_application_platform:5.0.8:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-107400",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-20T13:51:03.441460Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T13:51:15.010Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:tririga_application_platform:5.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:tririga_application_platform:5.0.8:*:*:*:*:*:*:*"
],
"product": "TRIRIGA Application Platform",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "5.0.8",
"status": "affected",
"version": "5.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.\u003c/p\u003e"
}
],
"value": "IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287 Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T23:46:46.720Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292418"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eCustomers using affected versions of IBM TRIRIGA should upgrade to IBM TRIRIGA Application Platform 5.0.9 or a later supported release containing the fix. IBM recommends applying the latest available maintenance to ensure protection against this vulnerability.\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eReference :\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli\u0026amp;product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform\u0026amp;release=5.0.9\u0026amp;platform=All\u0026amp;function=all\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli\u0026amp;product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform\u0026amp;release=5.0.9\u0026amp;platform=All\u0026amp;function=all\u003c/a\u003e\u003c/p\u003e"
}
],
"value": "Customers using affected versions of IBM TRIRIGA should upgrade to IBM TRIRIGA Application Platform 5.0.9 or a later supported release containing the fix. IBM recommends applying the latest available maintenance to ensure protection against this vulnerability.\n\n\n\n\n\n\n\nReference :\n\n\n\n https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli\u0026product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform\u0026release=5.0.9\u0026platform=All\u0026function=all"
}
],
"title": "Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-107400",
"datePublished": "2026-10-19T23:46:46.720Z",
"dateReserved": "2026-10-07T21:08:36.177Z",
"dateUpdated": "2026-10-20T13:51:15.010Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107366 (GCVE-0-2026-107366)
Vulnerability from nvd – Published: 2026-10-19 23:49 – Updated: 2026-10-21 03:56
VLAI
EPSS
VEX
Title
Langflow OSS Authorization Bypass Through User-Controlled Key
Summary
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID.
Severity
8.3 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-20 00:00 UTC
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7293016 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Langflow OSS |
Affected:
1.0.0 , ≤ 1.12.4
(semver)
cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:langflow_oss:1.12.4:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-107366",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-20T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T03:56:18.876Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:langflow_oss:1.12.4:*:*:*:*:*:*:*"
],
"product": "Langflow OSS",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.12.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user\u0027s messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID.\u003c/p\u003e"
}
],
"value": "IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user\u0027s messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639 Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T23:49:23.120Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7293016"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading \u003ca href=\"https://pypi.org/project/langflow/1.12.5/\" rel=\"nofollow\"\u003eLangflow OSS to version 1.12.5.\u003c/a\u003e\u003c/p\u003e\u003cp\u003eFor Langflow OSS versions 1.0.0 - 1.12.4, follow the \u003ca href=\"https://docs.langflow.org/release-notes\" rel=\"nofollow\"\u003ePrepare to upgrade instructions and release-specific configuration changes\u003c/a\u003e, including backing up your existing installation, then follow the \u003ca href=\"https://docs.langflow.org/get-started-installation\" rel=\"nofollow\"\u003eLangflow OSS installation instructions\u003c/a\u003e to install version 1.12.5 and test your flows. For deployments using MCP stdio, also apply the configuration controls in Workarounds and Mitigations.\u003c/p\u003e\u003cp\u003eThis bulletin also discloses fixes delivered in prior releases: CVE-2026-107366 was fixed in version 1.9.0; CVE-2026-18894 was fixed in version 1.11.2; and CVE-2026-77817 was fixed in version 1.11.5. Version 1.12.5 includes these fixes.\u003c/p\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.12.5. https://pypi.org/project/langflow/1.12.5/ \n\n\n\nFor Langflow OSS versions 1.0.0 - 1.12.4, follow the Prepare to upgrade instructions and release-specific configuration changes https://docs.langflow.org/release-notes , including backing up your existing installation, then follow the Langflow OSS installation instructions https://docs.langflow.org/get-started-installation to install version 1.12.5 and test your flows. For deployments using MCP stdio, also apply the configuration controls in Workarounds and Mitigations.\n\n\n\nThis bulletin also discloses fixes delivered in prior releases: CVE-2026-107366 was fixed in version 1.9.0; CVE-2026-18894 was fixed in version 1.11.2; and CVE-2026-77817 was fixed in version 1.11.5. Version 1.12.5 includes these fixes."
}
],
"title": "Langflow OSS Authorization Bypass Through User-Controlled Key",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends applying the following configuration controls to deployments using MCP stdio in addition to upgrading Langflow OSS to version 1.12.5. These controls do not replace the upgrade.\u003c/p\u003e\u003cp\u003eSet \u003ccode\u003eLANGFLOW_MCP_SERVER_INTERPRETER_HARDENING=true\u003c/code\u003e to reject direct shell-script execution, and set \u003ccode\u003eLANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY=true\u003c/code\u003e to block non-admin MCP stdio access. Restart the Langflow service after updating its environment configuration. These restrictions can require changes to existing MCP server launch configurations and limit which users can use MCP stdio.\u003c/p\u003e\u003cp\u003eFor public workflows, retain the default restriction on custom components. Explicitly enabling \u003ccode\u003eLANGFLOW_ALLOW_PUBLIC_CUSTOM_COMPONENTS\u003c/code\u003e permits custom component execution and changes the default protection described for CVE-2026-18894.\u003c/p\u003e\u003cp\u003eFor CVE-2026-77817, upgrading prevents the identified secret disclosure in new flow and project exports. Revoke or rotate any credentials exposed in previously exported files; upgrading does not remove secrets from copies already exported.\u003c/p\u003e"
}
],
"value": "IBM strongly recommends applying the following configuration controls to deployments using MCP stdio in addition to upgrading Langflow OSS to version 1.12.5. These controls do not replace the upgrade.\n\n\n\nSet LANGFLOW_MCP_SERVER_INTERPRETER_HARDENING=true to reject direct shell-script execution, and set LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY=true to block non-admin MCP stdio access. Restart the Langflow service after updating its environment configuration. These restrictions can require changes to existing MCP server launch configurations and limit which users can use MCP stdio.\n\n\n\nFor public workflows, retain the default restriction on custom components. Explicitly enabling LANGFLOW_ALLOW_PUBLIC_CUSTOM_COMPONENTS permits custom component execution and changes the default protection described for CVE-2026-18894.\n\n\n\nFor CVE-2026-77817, upgrading prevents the identified secret disclosure in new flow and project exports. Revoke or rotate any credentials exposed in previously exported files; upgrading does not remove secrets from copies already exported."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-107366",
"datePublished": "2026-10-19T23:49:23.120Z",
"dateReserved": "2026-10-07T20:49:16.611Z",
"dateUpdated": "2026-10-21T03:56:18.876Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105453 (GCVE-0-2026-105453)
Vulnerability from nvd – Published: 2026-10-19 23:56 – Updated: 2026-10-21 03:56
VLAI
EPSS
VEX
Title
IBM Sterling Connect:Direct for Unix Improper Privilege Management
Summary
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.
Severity
8.4 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-20 00:00 UTC
CWE
- CWE-269 - Improper Privilege Management
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292735 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Sterling Connect Direct for Unix |
Affected:
6.3.0.0 , ≤ 6.3.0.7
(semver)
Affected: 6.4.0.0 , ≤ 6.4.0.6 (semver) cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:*:*:*:*:unix:*:* cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:*:*:*:*:unix:*:* cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:*:*:*:*:unix:*:* cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:*:*:*:*:unix:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-105453",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-20T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T03:56:17.640Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:*:*:*:*:unix:*:*",
"cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:*:*:*:*:unix:*:*",
"cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:*:*:*:*:unix:*:*",
"cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:*:*:*:*:unix:*:*"
],
"product": "Sterling Connect Direct for Unix",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "6.3.0.7",
"status": "affected",
"version": "6.3.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.4.0.6",
"status": "affected",
"version": "6.4.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and\u0026nbsp;6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.\u003c/p\u003e"
}
],
"value": "IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and\u00a06.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T23:56:21.017Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292735"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct\u003c/td\u003e\u003ctd\u003eVersion\u003c/td\u003e\u003ctd\u003eRemediation/Fix/Instructions\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Sterling Connect:Direct for Unix\u003c/td\u003e\u003ctd\u003e6.3.0.0 - 6.3.0.7.iFix029\u003c/td\u003e\u003ctd\u003eApply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on\u00a0\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software\u0026amp;product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX\u0026amp;release=6.3.0.7\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=6.3.0.7*iFix033*\u0026amp;includeSupersedes=0\" rel=\"noopener noreferrer nofollow\"\u003eFix Central\u003c/a\u003e.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Sterling Connect:Direct for Unix\u003c/td\u003e\u003ctd\u003e6.4.0.0 - 6.4.0.6.iFix020\u003c/td\u003e\u003ctd\u003eApply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on \u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software\u0026amp;product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX\u0026amp;release=6.4.0.6\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=6.4.0.6*iFix025*\u0026amp;includeSupersedes=0\" rel=\"noopener noreferrer nofollow\"\u003eFix Central\u003c/a\u003e.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\n\nProductVersionRemediation/Fix/InstructionsIBM Sterling Connect:Direct for Unix6.3.0.0 - 6.3.0.7.iFix029Apply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on\u00a0 Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .IBM Sterling Connect:Direct for Unix6.4.0.0 - 6.4.0.6.iFix020Apply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes ."
}
],
"title": "IBM Sterling Connect:Direct for Unix Improper Privilege Management"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-105453",
"datePublished": "2026-10-19T23:56:06.910Z",
"dateReserved": "2026-10-05T13:57:37.099Z",
"dateUpdated": "2026-10-21T03:56:17.640Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76587 (GCVE-0-2026-76587)
Vulnerability from cvelistv5 – Published: 2026-10-20 22:07 – Updated: 2026-10-20 22:07
VLAI
EPSS
VEX
Title
IBM Planning Analytics Buffer Overflow
Summary
IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.
Severity
8.8 (High)
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7291604 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Planning Analytics |
Affected:
2.0
Affected: 2.1 cpe:2.3:a:ibm:planning_analytics:2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:planning_analytics:2.0:*:*:*:*:*:*:*"
],
"product": "Planning Analytics",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "2.0"
},
{
"status": "affected",
"version": "2.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper\u0026nbsp;bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.\u003c/p\u003e"
}
],
"value": "IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper\u00a0bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T22:07:47.557Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7291604"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIt is strongly recommended that you apply the most recent security updates:\u00a0\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eAffected Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003ctd\u003eFix\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Planning Analytics Local\u003c/td\u003e\u003ctd\u003e2.1.0 - 2.1.23\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://w3.ibm.com/w3publisher/capa-release-announcements/2026-releases/pa-2026-releases\" rel=\"nofollow\"\u003eIBM Planning Analytics Local 2.1.24 is now available for download from Fix Central\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003eIBM Planning Analytics Cloud environment has been remediated.\u003c/p\u003e"
}
],
"value": "It is strongly recommended that you apply the most recent security updates:\u00a0\n\nAffected Product(s)Version(s)FixIBM Planning Analytics Local2.1.0 - 2.1.23 IBM Planning Analytics Local 2.1.24 is now available for download from Fix Central https://w3.ibm.com/w3publisher/capa-release-announcements/2026-releases/pa-2026-releases \n\n\n\nIBM Planning Analytics Cloud environment has been remediated."
}
],
"title": "IBM Planning Analytics Buffer Overflow"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-76587",
"datePublished": "2026-10-20T22:07:47.557Z",
"dateReserved": "2026-08-19T14:24:55.165Z",
"dateUpdated": "2026-10-20T22:07:47.557Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-9825 (GCVE-0-2026-9825)
Vulnerability from cvelistv5 – Published: 2026-10-20 22:02 – Updated: 2026-10-21 15:35
VLAI
EPSS
VEX
Title
IBM Cyber Fraud Reachable Assertion
Summary
IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 15:35 UTC
CWE
- CWE-617 - Reachable Assertion
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290671 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | CyberFraud |
Affected:
1.0.0 , ≤ 1.0.2
(semver)
cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cyber_fraud:1.0.2:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-9825",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T15:35:47.899908Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T15:35:58.392Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:cyber_fraud:1.0.2:*:*:*:*:*:*:*"
],
"product": "CyberFraud",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.0.2",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.\u003c/p\u003e"
}
],
"value": "IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-617",
"description": "CWE-617 Reachable Assertion",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T22:02:54.216Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290671"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly encourages customers to update their systems promptly.\u003c/p\u003e\u003cp\u003ePlease upgrade to at least version 1.1.0 according to the following instructions:\u003cbr/\u003e\u003cbr/\u003e\u003ca href=\"https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud\" rel=\"noopener noreferrer nofollow\"\u003ehttps://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud\" rel=\"noopener noreferrer nofollow\"\u003ehttps://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud\u003c/a\u003e\u003c/p\u003e"
}
],
"value": "IBM strongly encourages customers to update their systems promptly.\n\n\n\nPlease upgrade to at least version 1.1.0 according to the following instructions:\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud \n\n\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud"
}
],
"title": "IBM Cyber Fraud Reachable Assertion"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-9825",
"datePublished": "2026-10-20T22:02:54.216Z",
"dateReserved": "2026-05-28T11:36:30.290Z",
"dateUpdated": "2026-10-21T15:35:58.392Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-81212 (GCVE-0-2026-81212)
Vulnerability from cvelistv5 – Published: 2026-10-20 21:58 – Updated: 2026-10-20 21:58
VLAI
EPSS
VEX
Title
DataStage on Cloud Pak for Data Improper Authorization
Summary
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller poison any tenant's cached flow parameters.
Severity
10 (Critical)
CWE
- CWE-285 - Improper Authorization
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7289603 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | DataStage on Cloud Pak for Data |
Affected:
5.4.0.0
cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.4.0.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.4.0.0:*:*:*:*:*:*:*"
],
"product": "DataStage on Cloud Pak for Data",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "5.4.0.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant\u0027s key. This collapses the platform\u0027s credential-encryption boundary and lets an anonymous caller poison any tenant\u0027s cached flow parameters.\u003c/p\u003e"
}
],
"value": "IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant\u0027s key. This collapses the platform\u0027s credential-encryption boundary and lets an anonymous caller poison any tenant\u0027s cached flow parameters."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "CWE-285 Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:58:51.662Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7289603"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003e\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerability now by upgrading DataStage on Cloud Pak for Data.\u003c/strong\u003e\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct(s)\u003c/td\u003e\u003ctd\u003eVersion(s) number and/or range\u00a0\u003c/td\u003e\u003ctd\u003eRemediation/Fix/Instructions\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eDataStage on Cloud Pak for Data\u003c/td\u003e\u003ctd\u003e5.4.0.0\u003c/td\u003e\u003ctd\u003e\u003cp\u003eUpgrade to 5.4 patch 8 or later by following these \u003ca href=\"https://www.ibm.com/docs/en/software-hub/5.4.x?topic=overview-available-patches-software-hub-version-540\" rel=\"nofollow\"\u003einstructions\u003c/a\u003e.\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading DataStage on Cloud Pak for Data.\n\nProduct(s)Version(s) number and/or range\u00a0Remediation/Fix/InstructionsDataStage on Cloud Pak for Data5.4.0.0\n\nUpgrade to 5.4 patch 8 or later by following these instructions https://www.ibm.com/docs/en/software-hub/5.4.x ."
}
],
"title": "DataStage on Cloud Pak for Data Improper Authorization"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-81212",
"datePublished": "2026-10-20T21:58:51.662Z",
"dateReserved": "2026-08-26T17:04:33.191Z",
"dateUpdated": "2026-10-20T21:58:51.662Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82891 (GCVE-0-2026-82891)
Vulnerability from cvelistv5 – Published: 2026-10-20 21:55 – Updated: 2026-10-20 21:55
VLAI
EPSS
VEX
Title
IBM Guardium Data Protection is affected by a security vulnerability
Summary
IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.
Severity
8.1 (High)
CWE
- CWE-321 - Use of Hard-coded Cryptographic Key
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7293014 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Guardium Data Protection |
Affected:
12.1
Affected: 12.2 cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:*"
],
"product": "Guardium Data Protection",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "12.1"
},
{
"status": "affected",
"version": "12.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.\u003c/p\u003e"
}
],
"value": "IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-321",
"description": "CWE-321 Use of Hard-coded Cryptographic Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:55:01.289Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7293014"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cp\u003e\u003cstrong\u003eIBM encourages customers to update their systems promptly.\u003c/strong\u003e\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003cdiv\u003e\u003cdiv\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cstrong\u003e\u00a0Product\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003eVersions\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003e\u00a0Fix\u003c/strong\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Guardium Data Protection\u003c/td\u003e\u003ctd\u003e12.1\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security\u0026amp;product=ibm/Information+Management/InfoSphere+Guardium\u0026amp;release=All\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=SqlGuard_12.0p150_Bundle\u0026amp;includeSupersedes=0\u0026amp;source=fc\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security\u0026amp;product=ibm/Information+Management/InfoSphere+Guardium\u0026amp;release=All\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=SqlGuard_12.0p150_Bundle\u0026amp;includeSupersedes=0\u0026amp;source=fc\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Guardium Data Protection\u003c/td\u003e\u003ctd\u003e12.2\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security\u0026amp;product=ibm/Information+Management/InfoSphere+Guardium\u0026amp;release=12.2\u0026amp;platform=Linux\u0026amp;function=fixId\u0026amp;fixids=SqlGuard_12.0p233_FixPack\u0026amp;includeSupersedes=0\u0026amp;source=fc\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security\u0026amp;product=ibm/Information+Management/InfoSphere+Guardium\u0026amp;release=12.2\u0026amp;platform=Linux\u0026amp;function=fixId\u0026amp;fixids=SqlGuard_12.0p233_FixPack\u0026amp;includeSupersedes=0\u0026amp;source=fc\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e"
}
],
"value": "IBM encourages customers to update their systems promptly.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\u00a0ProductVersions\u00a0FixIBM Guardium Data Protection12.1 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security\u0026product=ibm/Information+Management/InfoSphere+Guardium\u0026release=All\u0026platform=All\u0026function=fixId\u0026fixids=SqlGuard_12.0p150_Bundle\u0026includeSupersedes=0\u0026source=fc IBM Guardium Data Protection12.2 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security\u0026product=ibm/Information+Management/InfoSphere+Guardium\u0026release=12.2\u0026platform=Linux\u0026function=fixId\u0026fixids=SqlGuard_12.0p233_FixPack\u0026includeSupersedes=0\u0026source=fc"
}
],
"title": "IBM Guardium Data Protection is affected by a security vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-82891",
"datePublished": "2026-10-20T21:55:01.289Z",
"dateReserved": "2026-08-31T09:12:21.427Z",
"dateUpdated": "2026-10-20T21:55:01.289Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87800 (GCVE-0-2026-87800)
Vulnerability from cvelistv5 – Published: 2026-10-20 21:53 – Updated: 2026-10-21 15:51
VLAI
EPSS
VEX
Title
IBM Cyber Fraud includes components with multiple known vulnerabilities
Summary
IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.
Severity
6.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 14:24 UTC
CWE
- CWE-434 - Unrestricted Upload of File with Dangerous Type
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290671 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Cyber Fraud |
Affected:
1.0.0 , ≤ 1.0.2
(semver)
cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cyber_fraud:1.0.2:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87800",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T14:24:50.386765Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T15:51:39.236Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:cyber_fraud:1.0.2:*:*:*:*:*:*:*"
],
"product": "Cyber Fraud",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.0.2",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.\u003c/p\u003e"
}
],
"value": "IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-434",
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:54:29.497Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290671"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly encourages customers to update their systems promptly.\u003c/p\u003e\u003cp\u003ePlease upgrade to at least version 1.1.0 according to the following instructions:\u003cbr/\u003e\u003cbr/\u003e\u003ca href=\"https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud\" rel=\"noopener noreferrer nofollow\"\u003ehttps://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud\" rel=\"noopener noreferrer nofollow\"\u003ehttps://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud\u003c/a\u003e\u003c/p\u003e"
}
],
"value": "IBM strongly encourages customers to update their systems promptly.\n\n\n\nPlease upgrade to at least version 1.1.0 according to the following instructions:\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud \n\n\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud"
}
],
"title": "IBM Cyber Fraud includes components with multiple known vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-87800",
"datePublished": "2026-10-20T21:53:18.569Z",
"dateReserved": "2026-09-09T10:02:11.467Z",
"dateUpdated": "2026-10-21T15:51:39.236Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-92559 (GCVE-0-2026-92559)
Vulnerability from cvelistv5 – Published: 2026-10-20 21:52 – Updated: 2026-10-20 21:52
VLAI
EPSS
VEX
Title
IBM App Connect Enterprise is vulnerable to a credential exposure
Summary
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.
Severity
9.8 (Critical)
CWE
- CWE-1327 - Binding to an Unrestricted IP Address
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7291781 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | App Connect Enterprise |
Affected:
13.0.1.0 , ≤ 13.0.8.2
(semver)
cpe:2.3:a:ibm:app_connect_enterprise:13.0.1.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:app_connect_enterprise:13.0.1.0:*:*:*:*:*:*:*"
],
"product": "App Connect Enterprise",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "13.0.8.2",
"status": "affected",
"version": "13.0.1.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.\u003c/p\u003e"
}
],
"value": "IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1327",
"description": "CWE-1327 Binding to an Unrestricted IP Address",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:52:22.560Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7291781"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerability/vulnerabilities now by applying the appropriate fix to IBM App Connect Enterprise\u003c/strong\u003e\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ccolgroup\u003e\u003ccol/\u003e\u003ccol/\u003e\u003ccol/\u003e\u003ccol/\u003e\u003c/colgroup\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eAffected Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003ctd\u003eAPAR\u003c/td\u003e\u003ctd\u003eRemediation / Fixes\u00a0\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM App Connect Enterprise\u003c/td\u003e\u003ctd\u003e13.0.1.0 - 13.0.8.2\u003c/td\u003e\u003ctd\u003eIT50100\u003c/td\u003e\u003ctd\u003e\u003cp\u003eThe APAR (IT50100) is available from\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/pages/download-ibm-app-connect-enterprise-13090\" rel=\"noopener noreferrer nofollow\"\u003eIBM App Connect Enterprise v13- Fix Pack Release 13.0.9.0\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability/vulnerabilities now by applying the appropriate fix to IBM App Connect Enterprise\n\nAffected Product(s)Version(s)APARRemediation / Fixes\u00a0IBM App Connect Enterprise13.0.1.0 - 13.0.8.2IT50100\n\nThe APAR (IT50100) is available from\n\n\n\n IBM App Connect Enterprise v13- Fix Pack Release 13.0.9.0 https://www.ibm.com/support/pages/download-ibm-app-connect-enterprise-13090"
}
],
"title": "IBM App Connect Enterprise is vulnerable to a credential exposure"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-92559",
"datePublished": "2026-10-20T21:52:22.560Z",
"dateReserved": "2026-09-16T13:25:30.418Z",
"dateUpdated": "2026-10-20T21:52:22.560Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-93441 (GCVE-0-2026-93441)
Vulnerability from cvelistv5 – Published: 2026-10-20 21:51 – Updated: 2026-10-20 21:51
VLAI
EPSS
VEX
Title
IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service
Summary
IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
Severity
8.6 (High)
CWE
- CWE-400 - Uncontrolled Resource Consumption
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292244 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | QRadar Security Information and Event Management |
Affected:
7.4-20210823144546 , ≤ 7.5-20260930064858
(custom)
Affected: 7.6-20260330053257 , ≤ 7.6-20260930064910 (custom) cpe:2.3:a:ibm:qradar_security_information_and_event_management:http:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:qradar_security_information_and_event_management:http:*:*:*:*:*:*:*"
],
"product": "QRadar Security Information and Event Management",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "7.5-20260930064858",
"status": "affected",
"version": "7.4-20210823144546",
"versionType": "custom"
},
{
"lessThanOrEqual": "7.6-20260930064910",
"status": "affected",
"version": "7.6-20260330053257",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.\u003c/p\u003e"
}
],
"value": "IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400 Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:51:16.499Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292244"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly encourages customers to update their systems promptly.\u003c/p\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct\u003c/td\u003e\u003ctd\u003eProtocol\u003c/td\u003e\u003ctd\u003eVersion\u003c/td\u003e\u003ctd\u003eFix\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM QRadar SIEM\u003c/td\u003e\u003ctd\u003eHTTP Receiver\u003c/td\u003e\u003ctd\u003e\u00a07.5\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security\u0026amp;product=ibm/Other+software/IBM+Security+QRadar+SIEM\u0026amp;release=All\u0026amp;platform=Linux\u0026amp;function=fixId\u0026amp;fixids=7.5.0-QRADAR-DSM-JuniperJunOS-7.5-20260826070157.noarch.rpm,7.5.0-QRADAR-PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm,7.6.0-QRADAR-DSM-CitrixNetScaler-7.6-20261005125714.noarch.rpm,7.6.0-QRADAR-DSM-ArubaMobility-7.6-20261005061312.noarch.rpm,7.6.0-QRADAR-DSM-JuniperJunOS-7.6-20260826070207.noarch.rpm,7.6.0-QRADAR-DSM-CiscoMeraki-7.6-20260908194712.noarch.rpm,7.5.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.5-20260928060353.noarch.rpm,7.6.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.6-20260928060405.noarch.rpm,7.5.0-QRADAR-DSM-CiscoMeraki-7.5-20260908194704.noarch.rpm,7.5.0-QRADAR-DSM-CiscoIronPort-7.5-20260928155658.noarch.rpm,7.6.0-QRADAR-PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm,7.5.0-QRADAR-DSM-ArubaMobility-7.5-20261003162837.noarch.rpm,7.6.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.6-20260813063016.noarch.rpm,7.6.0-QRADAR-DSM-CiscoIronPort-7.6-20260929090932.noarch.rpm,7.5.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.5-20260811152834.noarch.rpm,7.5.0-QRADAR-DSM-CitrixNetScaler-7.5-20261005110756.noarch.rpm\u0026amp;includeSupersedes=0\u0026amp;source=fc\" rel=\"nofollow\"\u003ePROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM QRadar SIEM\u003c/td\u003e\u003ctd\u003eHTTP Receiver\u003c/td\u003e\u003ctd\u003e\u00a07.6\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security\u0026amp;product=ibm/Other+software/IBM+Security+QRadar+SIEM\u0026amp;release=All\u0026amp;platform=Linux\u0026amp;function=fixId\u0026amp;fixids=7.5.0-QRADAR-DSM-JuniperJunOS-7.5-20260826070157.noarch.rpm,7.5.0-QRADAR-PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm,7.6.0-QRADAR-DSM-CitrixNetScaler-7.6-20261005125714.noarch.rpm,7.6.0-QRADAR-DSM-ArubaMobility-7.6-20261005061312.noarch.rpm,7.6.0-QRADAR-DSM-JuniperJunOS-7.6-20260826070207.noarch.rpm,7.6.0-QRADAR-DSM-CiscoMeraki-7.6-20260908194712.noarch.rpm,7.5.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.5-20260928060353.noarch.rpm,7.6.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.6-20260928060405.noarch.rpm,7.5.0-QRADAR-DSM-CiscoMeraki-7.5-20260908194704.noarch.rpm,7.5.0-QRADAR-DSM-CiscoIronPort-7.5-20260928155658.noarch.rpm,7.6.0-QRADAR-PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm,7.5.0-QRADAR-DSM-ArubaMobility-7.5-20261003162837.noarch.rpm,7.6.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.6-20260813063016.noarch.rpm,7.6.0-QRADAR-DSM-CiscoIronPort-7.6-20260929090932.noarch.rpm,7.5.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.5-20260811152834.noarch.rpm,7.5.0-QRADAR-DSM-CitrixNetScaler-7.5-20261005110756.noarch.rpm\u0026amp;includeSupersedes=0\u0026amp;source=fc\" rel=\"nofollow\"\u003ePROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003c/div\u003e\u003cp\u003eThese RPMs will be updated as part of \u003ca href=\"https://www.ibm.com/docs/en/qsip/7.6.0?topic=tasks-automatic-updates\" rel=\"noopener noreferrer nofollow\"\u003eQRadar Auto Update\u003c/a\u003e where enabled.\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly encourages customers to update their systems promptly.\n\nProductProtocolVersionFixIBM QRadar SIEMHTTP Receiver\u00a07.5 PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes IBM QRadar SIEMHTTP Receiver\u00a07.6 PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes \n\n\n\n\n\nThese RPMs will be updated as part of QRadar Auto Update https://www.ibm.com/docs/en/qsip/7.6.0 where enabled."
}
],
"title": "IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-93441",
"datePublished": "2026-10-20T21:51:16.499Z",
"dateReserved": "2026-09-17T22:03:39.454Z",
"dateUpdated": "2026-10-20T21:51:16.499Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-93442 (GCVE-0-2026-93442)
Vulnerability from cvelistv5 – Published: 2026-10-20 21:48 – Updated: 2026-10-21 15:37
VLAI
EPSS
VEX
Title
IBM QRadar SIEM Out-of-bounds Read
Summary
IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.
Severity
8.2 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 15:37 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292240 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | QRadar |
Affected:
7.6.0.0 , ≤ 7.6.0.4
(semver)
Affected: 7.5.0 , ≤ 7.5.0 Update Package 16 Interim Fix 001 (semver) cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.6.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.6.0.4:*:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_package_16_interim_fix_001:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-93442",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T15:37:05.507010Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T15:37:13.506Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.6.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.6.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_package_16_interim_fix_001:*:*:*:*:*:*"
],
"product": "QRadar",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "7.6.0.4",
"status": "affected",
"version": "7.6.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.5.0 Update Package 16 Interim Fix 001",
"status": "affected",
"version": "7.5.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.\u003c/p\u003e"
}
],
"value": "IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:48:25.321Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292240"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly encourages customers to update their systems promptly.\u003c/p\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct\u003c/td\u003e\u003ctd\u003eVersion\u003c/td\u003e\u003ctd\u003eFix\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM QRadar SIEM\u003c/td\u003e\u003ctd\u003e7.6.0\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/pages/node/7288897\" rel=\"nofollow\"\u003e7.6.0.5\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM QRadar SIEM\u003c/td\u003e\u003ctd\u003e7.5.0\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/pages/node/7289152\" rel=\"nofollow\"\u003e7.5.0 UP16 IF02\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly encourages customers to update their systems promptly.\n\nProductVersionFixIBM QRadar SIEM7.6.0 7.6.0.5 https://www.ibm.com/support/pages/node/7288897 IBM QRadar SIEM7.5.0 7.5.0 UP16 IF02 https://www.ibm.com/support/pages/node/7289152"
}
],
"title": "IBM QRadar SIEM Out-of-bounds Read"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-93442",
"datePublished": "2026-10-20T21:48:03.902Z",
"dateReserved": "2026-09-17T22:05:34.817Z",
"dateUpdated": "2026-10-21T15:37:13.506Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-93744 (GCVE-0-2026-93744)
Vulnerability from cvelistv5 – Published: 2026-10-20 21:41 – Updated: 2026-10-21 15:51
VLAI
EPSS
VEX
Title
IBM i Improper Authentication
Summary
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability to alter server-side session security state.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 14:40 UTC
CWE
- CWE-287 - Improper Authentication
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292223 | vendor-advisorypatch |
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-93744",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T14:40:29.274998Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T15:51:48.687Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*"
],
"product": "i",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "7.6"
},
{
"status": "affected",
"version": "7.5"
},
{
"status": "affected",
"version": "7.4"
},
{
"status": "affected",
"version": "7.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability to alter server-side session security state.\u003c/p\u003e"
}
],
"value": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability to alter server-side session security state."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287 Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:41:32.677Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292223"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003e\u003ctable\u003e\u003ccolgroup\u003e\u003ccol/\u003e\u003ccol/\u003e\u003ccol/\u003e\u003c/colgroup\u003e\u003cthead\u003e\u003ctr\u003e\u003ctd\u003e\u003cstrong\u003eIBM i Release\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003e5770-SS1 Option 3\u00a0\u003cbr/\u003ePTF Number(s)\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003ePTF Download Link(s)\u003c/strong\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e7.6\u003c/td\u003e\u003ctd\u003eSJ11740\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11740\" rel=\"nofollow\"\u003ehttps://www.ibm.com/mysupport/s/fix-information?legacy=SJ11740\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e7.5\u003c/td\u003e\u003ctd\u003eSJ11745\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11745\" rel=\"nofollow\"\u003ehttps://www.ibm.com/mysupport/s/fix-information?legacy=SJ11745\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e7.4\u003c/td\u003e\u003ctd\u003eSJ11746\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11746\" rel=\"nofollow\"\u003ehttps://www.ibm.com/mysupport/s/fix-information?legacy=SJ11746\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e7.3\u003c/td\u003e\u003ctd\u003eSJ11747\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11747\" rel=\"nofollow\"\u003ehttps://www.ibm.com/mysupport/s/fix-information?legacy=SJ11747\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003eIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.\u003c/p\u003e"
}
],
"value": "IBM i Release5770-SS1 Option 3\u00a0\nPTF Number(s)PTF Download Link(s)7.6SJ11740 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11740 7.5SJ11745 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11745 7.4SJ11746 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11746 7.3SJ11747 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11747 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products."
}
],
"title": "IBM i Improper Authentication"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-93744",
"datePublished": "2026-10-20T21:41:32.677Z",
"dateReserved": "2026-09-18T16:03:13.170Z",
"dateUpdated": "2026-10-21T15:51:48.687Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-93888 (GCVE-0-2026-93888)
Vulnerability from cvelistv5 – Published: 2026-10-20 21:39 – Updated: 2026-10-21 15:38
VLAI
EPSS
VEX
Title
IBM Sterling Connect:Direct for Unix Buffer Overflow
Summary
IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 15:38 UTC
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292127 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Sterling Connect Direct for Unix |
Affected:
6.4.0.0 , ≤ 6.4.0.6
(semver)
Affected: 6.3.0.0 , ≤ 6.3.0.7 (semver) cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:*:*:*:*:unix:*:* cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:*:*:*:*:unix:*:* cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:*:*:*:*:unix:*:* cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:*:*:*:*:unix:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-93888",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T15:38:00.162733Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T15:38:13.763Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:*:*:*:*:unix:*:*",
"cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:*:*:*:*:unix:*:*",
"cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:*:*:*:*:unix:*:*",
"cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:*:*:*:*:unix:*:*"
],
"product": "Sterling Connect Direct for Unix",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "6.4.0.6",
"status": "affected",
"version": "6.4.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.3.0.7",
"status": "affected",
"version": "6.3.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility\u0026nbsp;is vulnerable to a code injection due to insufficient validation of user input.\u003c/p\u003e"
}
],
"value": "IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility\u00a0is vulnerable to a code injection due to insufficient validation of user input."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:39:48.421Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292127"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct\u003c/td\u003e\u003ctd\u003eVersion\u003c/td\u003e\u003ctd\u003eRemediation/Fix/Instructions\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Sterling Connect:Direct for Unix\u003c/td\u003e\u003ctd\u003e6.4.0.0 - 6.4.0.6.iFix021\u003c/td\u003e\u003ctd\u003eApply 6.4.0.6.iFix022, included in 6.4.0.6.iFix025 available on \u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software\u0026amp;product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX\u0026amp;release=6.4.0.6\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=6.4.0.6*iFix025*\u0026amp;includeSupersedes=0\" rel=\"noopener noreferrer nofollow\"\u003eFix Central\u003c/a\u003e.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Sterling Connect:Direct for Unix\u003c/td\u003e\u003ctd\u003e6.3.0.0 - 6.3.0.7.iFix032\u003c/td\u003e\u003ctd\u003eApply 6.3.0.7.iFix033, available on \u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software\u0026amp;product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX\u0026amp;release=6.3.0.7\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=6.3.0.7*iFix033*\u0026amp;includeSupersedes=0\" rel=\"noopener noreferrer nofollow\"\u003eFix Central\u003c/a\u003e.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\n\nProductVersionRemediation/Fix/InstructionsIBM Sterling Connect:Direct for Unix6.4.0.0 - 6.4.0.6.iFix021Apply 6.4.0.6.iFix022, included in 6.4.0.6.iFix025 available on Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .IBM Sterling Connect:Direct for Unix6.3.0.0 - 6.3.0.7.iFix032Apply 6.3.0.7.iFix033, available on Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes ."
}
],
"title": "IBM Sterling Connect:Direct for Unix Buffer Overflow"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-93888",
"datePublished": "2026-10-20T21:39:48.421Z",
"dateReserved": "2026-09-18T20:18:47.997Z",
"dateUpdated": "2026-10-21T15:38:13.763Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-94402 (GCVE-0-2026-94402)
Vulnerability from cvelistv5 – Published: 2026-10-20 21:31 – Updated: 2026-10-20 21:31
VLAI
EPSS
VEX
Title
IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation
Summary
IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle() function re-inserts a substring of user-supplied label text into the DOM via an unsanitized innerHTML write when the title exceeds the available container width. A remote attacker could exploit this vulnerability to execute arbitrary JavaScript in the victim's browser session.
Severity
6.1 (Medium)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7291785 | vendor-advisorypatch |
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | @carbon/charts |
Affected:
0.4.0 , ≤ 1.27.19
(semver)
cpe:2.3:a:ibm:carbon_charts:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:carbon_charts:1.27.19:*:*:*:*:*:*:* |
|
| IBM | @carbon/charts-react |
Affected:
0.4.0 , ≤ 1.27.19
(semver)
cpe:2.3:a:ibm:carboncharts_react:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:carboncharts_react:1.27.19:*:*:*:*:*:*:* |
|
| IBM | @carbon/charts-angular |
Affected:
0.4.0 , ≤ 1.27.19
(semver)
cpe:2.3:a:ibm:carboncharts_angular:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:carboncharts_angular:1.27.19:*:*:*:*:*:*:* |
|
| IBM | @carbon/charts-vue |
Affected:
0.4.0 , ≤ 1.27.19
(semver)
cpe:2.3:a:ibm:carboncharts_vue:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:carboncharts_vue:1.27.19:*:*:*:*:*:*:* |
|
| IBM | @carbon/charts-svelte |
Affected:
0.4.0 , ≤ 1.27.19
(semver)
cpe:2.3:a:ibm:carboncharts_svelte:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:carboncharts_svelte:1.27.19:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:carbon_charts:0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:carbon_charts:1.27.19:*:*:*:*:*:*:*"
],
"product": "@carbon/charts",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.27.19",
"status": "affected",
"version": "0.4.0",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:carboncharts_react:0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:carboncharts_react:1.27.19:*:*:*:*:*:*:*"
],
"product": "@carbon/charts-react",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.27.19",
"status": "affected",
"version": "0.4.0",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:carboncharts_angular:0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:carboncharts_angular:1.27.19:*:*:*:*:*:*:*"
],
"product": "@carbon/charts-angular",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.27.19",
"status": "affected",
"version": "0.4.0",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:carboncharts_vue:0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:carboncharts_vue:1.27.19:*:*:*:*:*:*:*"
],
"product": "@carbon/charts-vue",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.27.19",
"status": "affected",
"version": "0.4.0",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:carboncharts_svelte:0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:carboncharts_svelte:1.27.19:*:*:*:*:*:*:*"
],
"product": "@carbon/charts-svelte",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.27.19",
"status": "affected",
"version": "0.4.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component\u0027s Title.truncateTitle() function re-inserts a substring of user-supplied label text into the DOM via an unsanitized innerHTML write when the title exceeds the available container width. A remote attacker could exploit this vulnerability to execute arbitrary JavaScript in the victim\u0027s browser session.\u003c/p\u003e"
}
],
"value": "IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component\u0027s Title.truncateTitle() function re-inserts a substring of user-supplied label text into the DOM via an unsanitized innerHTML write when the title exceeds the available container width. A remote attacker could exploit this vulnerability to execute arbitrary JavaScript in the victim\u0027s browser session."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T21:31:46.027Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7291785"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003ePlease update the library to the\u00a0latest version\u00a0available on npm:\u00a0\u003ca href=\"https://www.npmjs.com/package/@carbon/charts\" rel=\"nofollow\"\u003ehttps://www.npmjs.com/package/@carbon/charts\u003c/a\u003e\u003c/p\u003e"
}
],
"value": "Please update the library to the\u00a0latest version\u00a0available on npm:\u00a0 https://www.npmjs.com/package/@carbon/charts"
}
],
"title": "IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIf an immediate upgrade to v1.27.20 is not possible, consuming applications should sanitize all user-influenced strings before passing them as data[0].group (or any label field) to a MeterChart. A DOMPurify call with ALLOWED_TAGS: [] applied to the value before it reaches the chart data will neutralize the payload. This is a temporary workaround only \u2014 upgrading to v1.27.20 remains the recommended remediation.\u003c/p\u003e"
}
],
"value": "If an immediate upgrade to v1.27.20 is not possible, consuming applications should sanitize all user-influenced strings before passing them as data[0].group (or any label field) to a MeterChart. A DOMPurify call with ALLOWED_TAGS: [] applied to the value before it reaches the chart data will neutralize the payload. This is a temporary workaround only \u2014 upgrading to v1.27.20 remains the recommended remediation."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-94402",
"datePublished": "2026-10-20T21:31:46.027Z",
"dateReserved": "2026-09-21T13:43:42.740Z",
"dateUpdated": "2026-10-20T21:31:46.027Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105453 (GCVE-0-2026-105453)
Vulnerability from cvelistv5 – Published: 2026-10-19 23:56 – Updated: 2026-10-21 03:56
VLAI
EPSS
VEX
Title
IBM Sterling Connect:Direct for Unix Improper Privilege Management
Summary
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.
Severity
8.4 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-20 00:00 UTC
CWE
- CWE-269 - Improper Privilege Management
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292735 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Sterling Connect Direct for Unix |
Affected:
6.3.0.0 , ≤ 6.3.0.7
(semver)
Affected: 6.4.0.0 , ≤ 6.4.0.6 (semver) cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:*:*:*:*:unix:*:* cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:*:*:*:*:unix:*:* cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:*:*:*:*:unix:*:* cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:*:*:*:*:unix:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-105453",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-20T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T03:56:17.640Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:*:*:*:*:unix:*:*",
"cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:*:*:*:*:unix:*:*",
"cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:*:*:*:*:unix:*:*",
"cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:*:*:*:*:unix:*:*"
],
"product": "Sterling Connect Direct for Unix",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "6.3.0.7",
"status": "affected",
"version": "6.3.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.4.0.6",
"status": "affected",
"version": "6.4.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and\u0026nbsp;6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.\u003c/p\u003e"
}
],
"value": "IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and\u00a06.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T23:56:21.017Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292735"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct\u003c/td\u003e\u003ctd\u003eVersion\u003c/td\u003e\u003ctd\u003eRemediation/Fix/Instructions\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Sterling Connect:Direct for Unix\u003c/td\u003e\u003ctd\u003e6.3.0.0 - 6.3.0.7.iFix029\u003c/td\u003e\u003ctd\u003eApply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on\u00a0\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software\u0026amp;product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX\u0026amp;release=6.3.0.7\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=6.3.0.7*iFix033*\u0026amp;includeSupersedes=0\" rel=\"noopener noreferrer nofollow\"\u003eFix Central\u003c/a\u003e.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Sterling Connect:Direct for Unix\u003c/td\u003e\u003ctd\u003e6.4.0.0 - 6.4.0.6.iFix020\u003c/td\u003e\u003ctd\u003eApply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on \u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software\u0026amp;product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX\u0026amp;release=6.4.0.6\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=6.4.0.6*iFix025*\u0026amp;includeSupersedes=0\" rel=\"noopener noreferrer nofollow\"\u003eFix Central\u003c/a\u003e.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\n\nProductVersionRemediation/Fix/InstructionsIBM Sterling Connect:Direct for Unix6.3.0.0 - 6.3.0.7.iFix029Apply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on\u00a0 Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .IBM Sterling Connect:Direct for Unix6.4.0.0 - 6.4.0.6.iFix020Apply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes ."
}
],
"title": "IBM Sterling Connect:Direct for Unix Improper Privilege Management"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-105453",
"datePublished": "2026-10-19T23:56:06.910Z",
"dateReserved": "2026-10-05T13:57:37.099Z",
"dateUpdated": "2026-10-21T03:56:17.640Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107366 (GCVE-0-2026-107366)
Vulnerability from cvelistv5 – Published: 2026-10-19 23:49 – Updated: 2026-10-21 03:56
VLAI
EPSS
VEX
Title
Langflow OSS Authorization Bypass Through User-Controlled Key
Summary
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID.
Severity
8.3 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-20 00:00 UTC
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7293016 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Langflow OSS |
Affected:
1.0.0 , ≤ 1.12.4
(semver)
cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:langflow_oss:1.12.4:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-107366",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-20T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T03:56:18.876Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:langflow_oss:1.12.4:*:*:*:*:*:*:*"
],
"product": "Langflow OSS",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.12.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user\u0027s messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID.\u003c/p\u003e"
}
],
"value": "IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user\u0027s messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639 Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T23:49:23.120Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7293016"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading \u003ca href=\"https://pypi.org/project/langflow/1.12.5/\" rel=\"nofollow\"\u003eLangflow OSS to version 1.12.5.\u003c/a\u003e\u003c/p\u003e\u003cp\u003eFor Langflow OSS versions 1.0.0 - 1.12.4, follow the \u003ca href=\"https://docs.langflow.org/release-notes\" rel=\"nofollow\"\u003ePrepare to upgrade instructions and release-specific configuration changes\u003c/a\u003e, including backing up your existing installation, then follow the \u003ca href=\"https://docs.langflow.org/get-started-installation\" rel=\"nofollow\"\u003eLangflow OSS installation instructions\u003c/a\u003e to install version 1.12.5 and test your flows. For deployments using MCP stdio, also apply the configuration controls in Workarounds and Mitigations.\u003c/p\u003e\u003cp\u003eThis bulletin also discloses fixes delivered in prior releases: CVE-2026-107366 was fixed in version 1.9.0; CVE-2026-18894 was fixed in version 1.11.2; and CVE-2026-77817 was fixed in version 1.11.5. Version 1.12.5 includes these fixes.\u003c/p\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.12.5. https://pypi.org/project/langflow/1.12.5/ \n\n\n\nFor Langflow OSS versions 1.0.0 - 1.12.4, follow the Prepare to upgrade instructions and release-specific configuration changes https://docs.langflow.org/release-notes , including backing up your existing installation, then follow the Langflow OSS installation instructions https://docs.langflow.org/get-started-installation to install version 1.12.5 and test your flows. For deployments using MCP stdio, also apply the configuration controls in Workarounds and Mitigations.\n\n\n\nThis bulletin also discloses fixes delivered in prior releases: CVE-2026-107366 was fixed in version 1.9.0; CVE-2026-18894 was fixed in version 1.11.2; and CVE-2026-77817 was fixed in version 1.11.5. Version 1.12.5 includes these fixes."
}
],
"title": "Langflow OSS Authorization Bypass Through User-Controlled Key",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends applying the following configuration controls to deployments using MCP stdio in addition to upgrading Langflow OSS to version 1.12.5. These controls do not replace the upgrade.\u003c/p\u003e\u003cp\u003eSet \u003ccode\u003eLANGFLOW_MCP_SERVER_INTERPRETER_HARDENING=true\u003c/code\u003e to reject direct shell-script execution, and set \u003ccode\u003eLANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY=true\u003c/code\u003e to block non-admin MCP stdio access. Restart the Langflow service after updating its environment configuration. These restrictions can require changes to existing MCP server launch configurations and limit which users can use MCP stdio.\u003c/p\u003e\u003cp\u003eFor public workflows, retain the default restriction on custom components. Explicitly enabling \u003ccode\u003eLANGFLOW_ALLOW_PUBLIC_CUSTOM_COMPONENTS\u003c/code\u003e permits custom component execution and changes the default protection described for CVE-2026-18894.\u003c/p\u003e\u003cp\u003eFor CVE-2026-77817, upgrading prevents the identified secret disclosure in new flow and project exports. Revoke or rotate any credentials exposed in previously exported files; upgrading does not remove secrets from copies already exported.\u003c/p\u003e"
}
],
"value": "IBM strongly recommends applying the following configuration controls to deployments using MCP stdio in addition to upgrading Langflow OSS to version 1.12.5. These controls do not replace the upgrade.\n\n\n\nSet LANGFLOW_MCP_SERVER_INTERPRETER_HARDENING=true to reject direct shell-script execution, and set LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY=true to block non-admin MCP stdio access. Restart the Langflow service after updating its environment configuration. These restrictions can require changes to existing MCP server launch configurations and limit which users can use MCP stdio.\n\n\n\nFor public workflows, retain the default restriction on custom components. Explicitly enabling LANGFLOW_ALLOW_PUBLIC_CUSTOM_COMPONENTS permits custom component execution and changes the default protection described for CVE-2026-18894.\n\n\n\nFor CVE-2026-77817, upgrading prevents the identified secret disclosure in new flow and project exports. Revoke or rotate any credentials exposed in previously exported files; upgrading does not remove secrets from copies already exported."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-107366",
"datePublished": "2026-10-19T23:49:23.120Z",
"dateReserved": "2026-10-07T20:49:16.611Z",
"dateUpdated": "2026-10-21T03:56:18.876Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107400 (GCVE-0-2026-107400)
Vulnerability from cvelistv5 – Published: 2026-10-19 23:46 – Updated: 2026-10-20 13:51
VLAI
EPSS
VEX
Title
Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication
Summary
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-20 13:51 UTC
CWE
- CWE-287 - Improper Authentication
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7292418 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | TRIRIGA Application Platform |
Affected:
5.0.0 , ≤ 5.0.8
(semver)
cpe:2.3:a:ibm:tririga_application_platform:5.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:tririga_application_platform:5.0.8:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-107400",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-20T13:51:03.441460Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T13:51:15.010Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:tririga_application_platform:5.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:tririga_application_platform:5.0.8:*:*:*:*:*:*:*"
],
"product": "TRIRIGA Application Platform",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "5.0.8",
"status": "affected",
"version": "5.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.\u003c/p\u003e"
}
],
"value": "IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287 Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T23:46:46.720Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7292418"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eCustomers using affected versions of IBM TRIRIGA should upgrade to IBM TRIRIGA Application Platform 5.0.9 or a later supported release containing the fix. IBM recommends applying the latest available maintenance to ensure protection against this vulnerability.\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eReference :\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli\u0026amp;product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform\u0026amp;release=5.0.9\u0026amp;platform=All\u0026amp;function=all\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli\u0026amp;product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform\u0026amp;release=5.0.9\u0026amp;platform=All\u0026amp;function=all\u003c/a\u003e\u003c/p\u003e"
}
],
"value": "Customers using affected versions of IBM TRIRIGA should upgrade to IBM TRIRIGA Application Platform 5.0.9 or a later supported release containing the fix. IBM recommends applying the latest available maintenance to ensure protection against this vulnerability.\n\n\n\n\n\n\n\nReference :\n\n\n\n https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli\u0026product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform\u0026release=5.0.9\u0026platform=All\u0026function=all"
}
],
"title": "Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-107400",
"datePublished": "2026-10-19T23:46:46.720Z",
"dateReserved": "2026-10-07T21:08:36.177Z",
"dateUpdated": "2026-10-20T13:51:15.010Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}