Security Warnings — Source: ibm

Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036)

2026-06-04 CVE-2026-42037

criticalIBM 2026-W23

Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-42264)

2026-06-04 CVE-2026-42264

criticalIBM 2026-W23

Security Bulletin: Multiple vulnerabilities in IBM Aspera Orchestrator

2026-06-04 CVE-2026-41316

highIBM 2026-W23

Security Bulletin: Multiple vulnerabilties in IBM Rational Functional Tester / DevOps Test UI

2026-06-04 CVE-2018-16487

criticalIBM 2026-W23

Security Bulletin: Security Vulnerabilities have been identified in IBM WebSphere Application Server bundled with IBM Financial Transaction Manager for Check Services

2026-06-04 CVE-2026-9311

mediumIBM 2026-W23

Security Bulletin: CockroachDB PostgreSQL for IBM VPC is vulnerable to SQL injection when executing special statements (CVE-2026-9837)

2026-06-03 CVE-2026-9837

mediumIBM 2026-W23

Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.

2026-06-03 CVE-2021-23337

criticalIBM 2026-W23

Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by an identity spoofing vulnerability

2026-06-03 CVE-2026-8644

mediumIBM 2026-W23

Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by remote code execution

2026-06-03 CVE-2026-9311

mediumIBM 2026-W23

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server (CVE-2026-9319)

2026-06-02 CVE-2026-9319

mediumIBM 2026-W23

Security Bulletin: Due to use of core-18.2.14.tgz, IBM Sterling Connect:Direct Web Services is affected by cross-site scripting (XSS) issue.

2026-06-02 CVE-2026-22610

mediumIBM 2026-W23

Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.

2026-06-02 CVE-2026-34073

criticalIBM 2026-W23

Security Bulletin: IBM Product Security Incident Response Team News

2026-06-02 CVE-2023-30438

mediumIBM 2026-W23

Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Node.js

2026-06-02 CVE-2026-44664

mediumIBM 2026-W23

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in axios-1.12.2.tgz

2026-06-01 CVE-2026-25639

highIBM 2026-W23

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in flask-3.1.2-py3-none-any.whl

2026-06-01 CVE-2026-27205

mediumIBM 2026-W23

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in golang.org/x/net-v0.48.0

2026-06-01 CVE-2026-33814

highIBM 2026-W23

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in lodash-4.17.21.tgz

2026-06-01 CVE-2025-13465

mediumIBM 2026-W23

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in path-to-regexp-0.1.12.tgz

2026-06-01 CVE-2026-4867

highIBM 2026-W23

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in WebSphere Application Server Liberty

2026-06-01 CVE-2025-14923

mediumIBM 2026-W23

Security Bulletin: IBM WebSphere Application Server is affected by a remote code execution vulnerability (CVE-2026-9319)

2026-06-01 CVE-2026-9319

criticalIBM 2026-W23

Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager is vulnerable to Buffer overflow in OMR

2026-05-30 CVE-2026-1188

criticalIBM 2026-W22

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in axios (CVE-2026-25639)

2026-05-30 CVE-2026-25639

highIBM 2026-W22

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Lodash and Lodash-es (CVE-2025-13465)

2026-05-30 CVE-2025-13465

mediumIBM 2026-W22

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Next.js (CVE-2025-48068)

2026-05-30 CVE-2025-48068

mediumIBM 2026-W22

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Next.js (CVE-2025-57752 and CVE-2025-55173)

2026-05-30 CVE-2025-57752

mediumIBM 2026-W22

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in pytest (CVE-2025-71176)

2026-05-30 CVE-2025-71176

mediumIBM 2026-W22

Security Bulletin: IBM Operations Analytics - Log Analysis is affected by denial of service (DoS) due to Apache Commons FileUpload

2026-05-29 CVE-2023-24998

highIBM 2026-W22

Security Bulletin: Multiple Vulnerabilities in IBM Aspera Enterprise WebApps

2026-05-29 CVE-2025-62718

criticalIBM 2026-W22

Security Bulletin: Multiple Vulnerabilities in IBM Aspera Enterprise WebApps

2026-05-29 CVE-2026-42033

criticalIBM 2026-W22

Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager

2026-05-29 CVE-2026-42033

criticalIBM 2026-W22

Security Bulletin: IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator (CVE-2026-7770)

2026-05-27 CVE-2026-7770

highIBM 2026-W22

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using Web Server Plug-ins (CVE-2026-8633, CVE-2026-8620)

2026-05-27 CVE-2026-8633

criticalIBM 2026-W22

Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities

2026-05-26 CVE-2026-8834

criticalIBM 2026-W22

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

2026-05-24 CVE-2026-40972

criticalIBM 2026-W21

Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2026-24072, CVE-2026-28780, CVE-2026-34059, CVE-2026-33523, CVE-2026-41080, CVE-2026-33857, CVE-2026-34

2026-05-22 CVE-2026-24072

mediumIBM 2026-W21

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a runtime panic condition in go-git [CVE-2026-33762]

2026-05-21 CVE-2026-33762

lowIBM 2026-W21

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service (CVE-2026-4410)

2026-05-19 CVE-2026-4410

mediumIBM 2026-W21

Security Bulletin: IBM WebSphere Automation is vulnerable to CVE-2026-35554 which affects the kakfa client library

2026-05-19 CVE-2026-35554

highIBM 2026-W21

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in pyasn1-0.6.2-py3-none-any.whl

2026-05-18 CVE-2026-30922

highIBM 2026-W21

Security Bulletin: Search tips - IBM Security Bulletin - IBM Support

2022-06-25 CVE-2021-44228

mediumIBM 2022-W25