Security Bulletin: IBM MQ Appliance is affected by an XML external entity injection vulnerability (CVE-2026-12666)

Summary IBM MQ Appliance has addressed an XML external entity injection vulnerability that could allow an authenticated attacker to obtain sensitive information or cause a denial of service when processing MQRFH2 headers. Vulnerability Details CVEID:CVE-2026-12666 DESCRIPTION: IBM MQ Classes for...

Security Bulletin: IBM MQ Appliance is affected by a deserialization filter bypass vulnerability (CVE-2026-10751)

Summary IBM MQ Appliance has addressed a deserialization filter bypass vulnerability that could allow an authenticated attacker to execute arbitrary code on client applications. Vulnerability Details CVEID:CVE-2026-10751 DESCRIPTION: IBM MQ Java and JMS client libraries could allow an authenticat...

Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability (CVE-2026-10853)

Summary IBM MQ Appliance has addressed an improper validation vulnerability that could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths. Vulnerability Details...

Security Bulletin: IBM MQ Appliance is affected by a heap buffer underflow vulnerability (CVE-2026-10858)

Summary IBM MQ Appliance has addressed a heap buffer underflow vulnerability that could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code when processing multi-segment messages. Vulnerability Details CVEID:CVE-2026-10858 DESCRIPTION: IBM MQ could...

Security Bulletin: IBM MQ Appliance is affected by an improper authorization vulnerability (CVE-2026-10030)

Summary IBM MQ Appliance has addressed an improper authorization vulnerability that could allow an authenticated attacker to create and start queue managers. Vulnerability Details CVEID:CVE-2026-10030 DESCRIPTION: IBM MQ Console allows authenticated non-administrative users to create and start...

Security Bulletin: IBM MQ Appliance is affected by an integer overflow vulnerability (CVE-2026-11725)

Summary IBM MQ Appliance has addressed an integer overflow vulnerability. Vulnerability Details CVEID:CVE-2026-11725 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing...

Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability in cluster migration data processing (CVE-2026-11716)

Summary IBM MQ Appliance has addressed an improper validation vulnerability in cluster migration data processing that could allow an authenticated attacker to cause a denial of service or execute arbitrary code during queue manager startup. Vulnerability Details CVEID:CVE-2026-11716 DESCRIPTION:...

Security Bulletin: IBM MQ Appliance is affected by a heap buffer overflow vulnerability (CVE-2026-11381)

Summary IBM MQ Appliance has addressed a heap buffer overflow vulnerability. Vulnerability Details CVEID:CVE-2026-11381 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution...

Security Bulletin: IBM MQ Appliance is affected by an integer overflow vulnerability in MQINQ request validation (CVE-2026-10744)

Summary IBM MQ Appliance has addressed an integer overflow vulnerability in MQINQ request validation that could allow an authenticated attacker to cause a denial of service or potentially escalate privileges. Vulnerability Details CVEID:CVE-2026-10744 DESCRIPTION: IBM MQ could allow an...

Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability in TLS certificate processing (CVE-2026-12150)

Summary IBM MQ Appliance has addressed an improper validation vulnerability that could allow a remote attacker with a trusted TLS client certificate to cause a denial of service or affect memory contents through deeply nested certificate data during TLS certificate processing. Vulnerability Detai...

Security Bulletin: IBM MQ Appliance is affected by an integer overflow vulnerability in distribution list processing (CVE-2026-11378)

Summary IBM MQ Appliance has addressed an integer overflow vulnerability in distribution list processing that could allow an authenticated attacker to cause a denial of service or execute arbitrary code. Vulnerability Details CVEID:CVE-2026-11378 DESCRIPTION: IBM MQ could allow an authenticated...

Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability in message header offset processing (CVE-2026-11726)

Summary IBM MQ Appliance has addressed an improper validation vulnerability in message header offset processing that could allow an authenticated attacker to obtain sensitive information or cause a denial of service. Vulnerability Details CVEID:CVE-2026-11726 DESCRIPTION: IBM MQ could allow an...

Security Bulletin: IBM MQ Appliance is affected by a stack buffer overflow vulnerability in XA transaction identifier processing (CVE-2026-11375)

Summary IBM MQ Appliance has addressed a stack buffer overflow vulnerability that could allow an authenticated attacker to cause a denial of service or execute arbitrary code through malformed XA transaction identifiers. Vulnerability Details CVEID:CVE-2026-11375 DESCRIPTION: IBM MQ could allow a...

Security Bulletin: IBM MQ Appliance is affected by a buffer overflow vulnerability in compressed data channel processing (CVE-2026-10027)

Summary IBM MQ Appliance has addressed a buffer overflow vulnerability that could allow a remote attacker to cause a denial of service or execute arbitrary code by sending malformed compressed data on channels configured with compression enabled. Vulnerability Details CVEID:CVE-2026-10027...

Security Bulletin: IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing (CVE-2026-10747)

Summary IBM MQ Appliance has addressed a heap buffer overflow vulnerability in protocol message processing that could allow a remote attacker to cause a denial of service or execute arbitrary code prior to authentication. Vulnerability Details CVEID:CVE-2026-10747 DESCRIPTION: IBM MQ could allow ...

Security Bulletin: IBM Db2 Mirror for i is vulnerable to Cross-Site Request Forgery [CVE-2026-17047]

Summary The IBM Db2 Mirror for i GUI is vulnerable to Cross-Site Request Forgery CVE-2026-17047 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17047 DESCRIPTION: IBM Db2 Mirror for i could allow a remote attacker to obtain sensitive information due to...

Security Bulletin: SQL injection vulnerability in IBM Cloud Pak for Business Automation Operational Decision Manager component - CVE-2026-18658

Summary IBM Operational Decision Manager in IBM Cloud Pak for Business Automation is vulnerable to a SQL injection attack. Vulnerability Details CVEID:CVE-2026-18658 DESCRIPTION: IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to...

PT-2026-89612

🚨 CVE-2026-78571 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval call on attacker-controlled input. 🎖@cveNotify...

PT-2026-89614

🚨 CVE-2026-78575 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of command-line arguments in the MCP stdio server configuration. 🎖@cveNotify...

PT-2026-89631

🚨 CVE-2026-81268 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration of API keys after user deactivation. 🎖@cveNotify...