Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge — IBM:7280476

Summary

Multiple vulnerabilities were addressed in IBM watsonx Orchestrate with watsonx Assistant Cartridge version 5.4.0

Timeline

Published by source

2026-07-18

Risk context

• Reported severity or threat level: critical.
• Reported CVSS score: 9.8 out of 10.
• Review exposure for the affected product or family: IBM watsonx Orchestrate with watsonx Assistant Cartridge Multiple vulnerabilities were addressed in.

Product

IBM watsonx Orchestrate with watsonx Assistant Cartridge Multiple vulnerabilities were addressed in

What to do

General, cautious steps (verify details in the official source):

• Prioritize patching or mitigation immediately (treat as actively risky).
• Identify affected product versions in your inventory and verify whether you are impacted.
• Apply vendor patches/updates or recommended mitigations as soon as available.
• Read the official advisory for exact affected versions and remediation steps.

Official advisory

• Read the official source
• CVE Record
• NVD

Evidence and provenance

Canonical advisory ID

IBM:7280476

Source

IBM

Vendor

IBM

Published by source

2026-07-18

Last source activity

2026-07-18

Additional identifiers

CVE-2026-35469

Curated by

hlukh.ch

Related advisories and connections

These advisories are connected by shared CVE, product, vendor, source, or time signals.