PT-2026-78667

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A stack buffer overflow allows a remote attacker to execute arbitrary code. A stack buffer overflow occurs when a program writes more data to a buffer located on...

PT-2026-78431

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor version FW1120.00 IBM PowerVM Hypervisor versions FW1110.00 through FW1110.30 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.80 Description Improper control of format strings may allow a local attacker to obtai...

PT-2026-78603

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack buffer overflow allows a remote attacker to execute arbitrary code. A stack buffer overflow occurs when a program writes more data to a buffer located on the stack...

PT-2026-78590

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Improper certificate validation allows a remote attacker to impersonate the TNC policy server and modify network traffic. Recommendations At the moment, there is no...

PT-2026-78584

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware version FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 Description A missing authorization issue exists in the interface...

PT-2026-78461

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Improper privilege management may allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer version that...

PT-2026-78588

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor version FW1120.00 IBM PowerVM Hypervisor versions FW1110.00 through FW1110.30 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.80 IBM PowerVM Hypervisor versions FW950.00 through FW950.H2 Description A flaw exist...

PT-2026-78430

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Network Installation Management NIM contains a flaw where TLS certificates are not properly validated. This could allow a remote attacker to gain unauthorized access to AIX...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 and IBM Db2 federated server shipped with IBM WebSphere Remote Server

Summary IBM Db2 and IBM Db2 federated server are shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM Db2 and IBM Db2 federated server has been published in a security bulletin CVE-2026-18096, CVE-2026-18097, CVE-2026-16480, CVE-2026-10543,...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.26 and 13.4.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...

Security Bulletin: IBM Guardium Data Protection is affected by a Denial-of-Service (DoS) vulnerability in Micrometer (CVE-2026-40984)

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-40984 DESCRIPTION: In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Affected versions:...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-31790 DESCRIPTION: Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-31790 DESCRIPTION: Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a...

Security Bulletin: IBM i is Affected By A Buffer Overflow Vulnerability [CVE-2026-18102]

Summary IBM i is vulnerable to heap-based buffer overflow CVE-2026-18102 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18102 DESCRIPTION: IBM i could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during...

Security Bulletin: IBM i is Affected By Denial of Service in Host Servers [CVE-2026-17015]

Summary IBM i is vulnerable to a denial of service due to an out-of-bounds read CVE-2026-17015 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17015 DESCRIPTION: IBM i could allow a remote authenticated attacker to cause a denial of service and obtain...

Security Bulletin: IBM Financial Transaction Manager v4.0.6.0 is impacted by multiple vulnerabilities in RedHat Universal Base Image

Summary IBM Financial Transaction Manager v4.0.6.0 has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-5914 DESCRIPTION: A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves a...

Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub

Summary Multiple vulnerabilities were addressed in IBM Data Product Hub version 5.3.1 Patch 11 Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslas...

Security Bulletin: IBM Storage Defender - Data Protect critical vulnerabilities resolved in Release Defender 2.2.1/Data Protect 7.4.1

Summary IBM Storage Defender: Data Protect critical vulnerabilities resolved in release Defender 2.2.1/Data Protect 7.4.1. The vulnerabilities have been addressed in Data Protect 7.4.1, which is included in IBM Storage Defender 2.2.1 Vulnerability Details CVEID:CVE-2020-14343 DESCRIPTION: A...

Security Bulletin: Improper input validation, integer overflow, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service

Summary IBM Storage Defender - Resiliency Service is vulnerable to improper input validation, integer overflow, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-54399 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message pars...

Security Bulletin: IBM Operations Analytics - Log Analysis is affected by an Improper Serialization due to Apache Log4j JSON Template Layout

Summary Apache Log4j JSON Template Layout in Apache Solr is used by IBM Operations Analytics - Log Analysis as part of the encoding log events. CVE-2026-34481. Vulnerability Details CVEID:CVE-2026-34481 DESCRIPTION: Apache Log4j's JsonTemplateLayout...