Security Bulletin: IBM i is Affected By An Unauthorized Privileges Vulnerability in SQL [CVE-2026-16722]

Summary IBM i is vulnerable to obtaining unauthorized privleges due to improper privilege management CVE-2026-16722 in SQL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16722 DESCRIPTION: IBM i could allow a remote authenticated attacker to obtain...

Security Bulletin: IBM i is Affected By Out-of-Bounds Read Vulnerability [CVE-2026-16863]

Summary IBM i is vulnerable to obtaining sensitive information due to an out-of-bounds read CVE-2026-16863 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16863 DESCRIPTION: IBM i could allow a remote authenticated attacker to obtain sensitive information d...

Security Bulletin: IBM i is Affected By A Privilege Escalation Vulnerability [CVE-2026-18669]

Summary IBM i is vulnerable to privilege escalation CVE-2026-18669 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18669 DESCRIPTION: IBM i is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engi...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Domain Name System

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16906, CVE-2026-16856 in BIND Domain Name System DNS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16906 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute arbitrary...

Security Bulletin: IBM i is Affected By A Remote Code Execution Vulnerability [CVE-2026-16975]

Summary IBM i is vulnerable to remote code execution due to a heap-based buffer overflow CVE-2026-16975 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16975 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute arbitrary code due to a...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Navigator for i

Summary IBM i is vulnerable to multiple vulnerabillities CVE-2026-16694, CVE-2026-17101, CVE-2026-17099, CVE-2026-16904, CVE-2026-17095, CVE-2026-17094, CVE-2026-17268, CVE-2026-17266, CVE-2026-17276, CVE-2026-18099, CVE-2026-18098, CVE-2026-18235, CVE-2026-18713, CVE-2026-18683, CVE-2026-18250,...

Security Bulletin: IBM Db2 Mirror for i is vulnerable to OS command injection [CVE-2026-16956]

Summary IBM Db2 Mirror for i is vulnerable to OS command injection as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16956 DESCRIPTION: IBM Db2 Mirror for i could allow a remote attacker to execute arbitrary commands due to improper neutralization of special...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.17 Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslash character U+005C ...

Security Bulletin: Vulnerability in PyNaCl bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the PyNaCl library, which is affected by a denial of service vulnerability. CVE-2025-69277. Vulnerability Details CVEID:CVE-2025-69277 DESCRIPTION: libsodium before ad3004e, in atypical use cases involving certain custom...

Security Bulletin: Vulnerability in lodash bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the lodash library, which is affected by multiple vulnerabilities, including prototype pollution vulnerabilities. CVE-2025-13465, CVE-2026-2950. Vulnerability Details CVEID:CVE-2025-13465 DESCRIPTION: Lodash versions 4.0.0...

Security Bulletin: Vulnerability in go-chi/chi bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the go-chi/chi library, which is affected by a denial of service vulnerability. CVE-2025-69725. Vulnerability Details CVEID:CVE-2025-69725 DESCRIPTION: An Open Redirect vulnerability in the go-chi/chi =5.2.2 RedirectSlashe...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery (CVE-2026-14529)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery vulnerability when sipServlet-1.1 is enabled. Vulnerability Details CVEID:CVE-2026-14529 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)

Summary IBM WebSphere Application Server Liberty is affected by a cross-site request forgery vulnerability with the collectiveController-1.0 enabled. Vulnerability Details CVEID:CVE-2026-14980 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a denial of service (CVE-2026-16192)

Summary IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with the restConnector-1.0 or restConnector-2.0 enabled. Vulnerability Details CVEID:CVE-2026-16192 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability (CVE-2026-14976, CVE-2026-15280)

Summary IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability with the collectiveController-1.0 enabled. Vulnerability Details CVEID:CVE-2026-15280 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Kerby

Summary Multiple vulnerabilities in Apache Kerby that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-57915 DESCRIPTION: It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Jansi

Summary A vulnerability in Jansi that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2026-8484 DESCRIPTION: A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl" wrapper due to a lack of size verification for the argument array before the...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher

Summary The following vulnerabilities, which can affect IBM Storage Scale and the Management GUI and could provide weaker-than-expected security, are now fixed in Storage Scale 5.2.3.9 or higher and 6.0.1.1 or higher. CVE-2026-19483, CVE-2026-13460 Vulnerability Details CVEID:CVE-2026-19483...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in QOS.CH Sarl logback

Summary Multiple vulnerabilities in QOS.CH Sarl logback that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-9828 DESCRIPTION: Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache SOAP

Summary Multiple vulnerabilities in Apache SOAP that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2022-40705 DESCRIPTION: An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to rea...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Thrift

Summary Multiple vulnerabilities in Apache Thrift that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2018-11798 DESCRIPTION: The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in json

Summary Multiple vulnerabilities in json that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-34610 DESCRIPTION: An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in jline-groovy (CVE-2023-50572)

Summary A vulnerability in jline-groovy that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-50572 DESCRIPTION: An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM OutofMemory error. CWE:CWE-787:...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Codehaus Jackson mapper

Summary Multiple vulnerabilities in Codehaus Jackson mapper that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2019-10172 DESCRIPTION: A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities simila...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons

Summary Multiple vulnerabilities in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons that are used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2025-58782 DESCRIPTION: Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Hadoop

Summary Multiple vulnerabilities in Apache Hadoop that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2021-25642 DESCRIPTION: ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeepe...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Hadoop

Summary Multiple vulnerabilities in Apache Hadoop that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2014-0229 DESCRIPTION: Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization f...

Security Bulletin: Vault vulnerable to LIST authorization bypass via trailing-slash strip

Summary Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a pat...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in dnsjava (CVE-2024-25638)

Summary A vulnerability in dnsjava that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-25638 DESCRIPTION: dnsjava is an implementation of DNS in Java. Records in DNS replies are not checked for their relevance to the query, allowing an attacker to...

Security Bulletin: IBM Transformation Extender Advanced is affected by multiple Java vulnerabilities.

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, is affected by multiple vulnerabilities because it is dependent on Java. Vulnerability Details CVEID:CVE-2026-34282 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with netwo...

Security Bulletin: QRadar App SDK for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Investigation Assistant App for IBM QRadar App SDK has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-25645 DESCRIPTION:...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Commons Compress

Summary Multiple vulnerabilities in Apache Commons Compress that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2023-42503 DESCRIPTION: Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.Th...

Security Bulletin: IBM WebSphere Application Server - Liberty is affected by multiple vulnerabilities

Summary IBM WebSphere Application Server Liberty is shipped as a supporting program of IBM OpenPages. Information about multiple vulnerabilities affecting IBM WebSphere Application Server Liberty has been published in a security bulletin. These products have addressed the applicable CVEs. For a...

Security Bulletin:Vulnerability in LibXML affects IBM Netezza Appliance

Summary The LibXML package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-8177 Vulnerability Details CVEID:CVE-2026-8177 DESCRIPTION: XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containi...

Security Bulletin:Vulnerability in Kerberos 5 affects IBM Netezza Appliance

Summary The Kerberos 5 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-40355 Vulnerability Details CVEID:CVE-2026-40355 DESCRIPTION: In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls...

Security Bulletin:Vulnerability in Click affects IBM Netezza Appliance

Summary The Click package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-7246 Vulnerability Details CVEID:CVE-2026-7246 DESCRIPTION: Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit function,...

Security Bulletin:Vulnerability in binutils affects IBM Netezza Appliance

Summary The binutils package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-4647 Vulnerability Details CVEID:CVE-2026-4647 DESCRIPTION: A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as...

Security Bulletin:Vulnerability in Vim affects IBM Netezza Appliance

Summary The Vim package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2022-2889, CVE-2026-46483 Vulnerability Details CVEID:CVE-2026-46483 DESCRIPTION: Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerabili...

Security Bulletin:Vulnerability in Perl affects IBM Netezza Appliance

Summary The Perl package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-8376 Vulnerability Details CVEID:CVE-2026-8376 DESCRIPTION: Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed...

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1x) is affected by multiple critical vulnerabilities in OpenSSL, Java SE, and Jetty

Summary IBM Cloud Pak for Data System 1x uses OpenSSL, Java SE, and Eclipse Jetty to provide cryptographic, runtime, and web application server functionality. This security update addresses multiple critical vulnerabilities affecting these components, including ASN.1 decoding flaws, CMS/PKCS7...

Security Bulletin: Vulnerability in SSSD affects IBM Netezza Appliance

Summary The SSSD package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-14474 Vulnerability Details CVEID:CVE-2026-14474 DESCRIPTION: A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured,...

Security Bulletin: Vulnerability in p11-kit affects IBM Netezza Appliance

Summary The p11-kit package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-2100 Vulnerability Details CVEID:CVE-2026-2100 DESCRIPTION: A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the CDeriveKey...

Security Bulletin: IBM Decision Intelligence Client Managed Software (Formerly Known as IBM Automation Decision Services) for July 2026- Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Automation Decision Services. See full list below. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full...

Security Bulletin: Vulnerability in OpenSSL affects IBM Netezza Appliance

Summary The OpenSSL package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-28386 Vulnerability Details CVEID:CVE-2026-28386 DESCRIPTION: Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES suppo...

Security Bulletin: Vulnerability in Rsync affects IBM Netezza Appliance

Summary The Rsync package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-29518 Vulnerability Details CVEID:CVE-2026-29518 DESCRIPTION: Rsync versions before 3.4.3 contain a time-of-check to time-of-use TOCTOU race condition in daemon file handli...

Security Bulletin: Vulnerability in Java affects IBM Netezza Appliance

Summary The Java package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-34282 Vulnerability Details CVEID:CVE-2026-34282 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities in bootstrap-3.4.1.tgz client library

Summary Vulnerabilities have been identified in bootstrap-3.4.1.tgz , which is used in IBM Engineering Lifecycle Management -Engineering Workflow Management Vulnerability Details CVEID:CVE-2024-6484 DESCRIPTION: Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript i...

Security Bulletin: Vulnerability in gnutls affects IBM Netezza Appliance

Summary The gnutls package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-42012 Vulnerability Details CVEID:CVE-2026-42012 DESCRIPTION: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially...

Security Bulletin: IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility (CVE-2026-13367)

Summary A privilege escalation vulnerability exists in the oninit utility of IBM Informix Dynamic Server. Successful exploitation could allow a local authorized user to gain root privileges. Vulnerability Details CVEID:CVE-2026-13367 DESCRIPTION: IBM Informix Dynamic Server contain a local...

Security Bulletin: Vulnerability in OpenSSL affects IBM Netezza Appliance

Summary The OpenSSL package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-34182 Vulnerability Details CVEID:CVE-2026-34182 DESCRIPTION: Issue Summary: Cryptographic Message Services CMS processing fails to perform sufficient input validation on...