Search
320 CVEs · published 2026-11-08 to 2026-11-08
CVEs (320)
Showing 26–50 of 320
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-78537 | MEDIUM | 6.8 | 2026-11-08 | IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 could allow a local attacker to obtain sensitive information due to the use of a weak cryptographic … | |
| CVE-2026-77153 | MEDIUM | 4.8 | 2026-11-08 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to obtain sensitive information from the Host-Based Printer Subsystem due to no authorization che… | |
| CVE-2026-75879 | MEDIUM | 4.3 | 2026-11-08 | IBM Content Navigator 3.0.15.0, 26.0.0.0, 3.1.0.0, and 3.2.0.0 is vulnerable to LDAP injection. A remote authenticated attacker could send a specially crafted request that … | |
| CVE-2026-6715 | CRITICAL | 9.8 | 2026-11-08 | IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating system command without adequate validation or sanitizatio… | |
| CVE-2026-3684 | MEDIUM | 6.5 | 2026-11-08 | IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001 through - 11.3.1.2 Interim Fix 002 could allow a user with administrative privileges to read and write arbitrary file… | |
| CVE-2026-2700 | MEDIUM | 4.3 | 2026-11-08 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 allows low-privileged users to execute administrative functions by dir… | |
| CVE-2026-2477 | MEDIUM | 6.5 | 2026-11-08 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 fails to enforce backend authorization checks, allowing low‑privileged… | |
| CVE-2026-19307 | MEDIUM | 4.3 | 2026-11-08 | IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1 S… | |
| CVE-2026-19133 | HIGH | 8.1 | 2026-11-08 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization. | |
| CVE-2026-18893 | HIGH | 7.1 | 2026-11-08 | IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to privilege escalation via user-defined function. | |
| CVE-2026-76052 | MEDIUM | 6.0 | 2026-11-08 | IBM Storage Scale System 6.2.3.0 through 6.2.3.6, and 7.0.0.0 through 7.0.1.0 and IBM Storage Scale 6.0.0.0 through 6.0.1.0, and 5.2.3.0 through 5.2.3.8 could allow an atta… | |
| CVE-2026-18668 | MEDIUM | 6.5 | 2026-11-08 | IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 - 6.2.2.1_1 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration. | |
| CVE-2026-18546 | MEDIUM | 5.4 | 2026-11-08 | IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to server-side request forgery (SSRF). This m… | |
| CVE-2026-18525 | MEDIUM | 4.9 | 2026-11-08 | IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port. | |
| CVE-2026-18484 | MEDIUM | 6.5 | 2026-11-08 | IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper slug normalization causing tool n… | |
| CVE-2026-18196 | MEDIUM | 5.4 | 2026-11-08 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to inject arbitrary HTML due to improper output neutralization. | |
| CVE-2026-18195 | MEDIUM | 4.2 | 2026-11-08 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to perform content spoofing due to improper output encod… | |
| CVE-2026-18194 | LOW | 2.5 | 2026-11-08 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to perform unauthorized actions due to missing anti-clickjacking controls. | |
| CVE-2026-18093 | HIGH | 7.5 | 2026-11-08 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to broken access control. | |
| CVE-2026-17466 | CRITICAL | 9.1 | 2026-11-08 | IBM Optim 1.0.0, 1.1.0, and 1.2.0 could allow a remote authenticated attacker to obtain sensitive information due to path traversal. | |
| CVE-2026-17437 | MEDIUM | 5.5 | 2026-11-08 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.29 could allow a local attacker to perform an arbitrary file write due to improper valida… | |
| CVE-2026-16699 | MEDIUM | 6.5 | 2026-11-08 | IBM Netezza Appliance 11.3.0.2 Interim Fix 002 through 11.3.1.3 Interim Fix 006 could allow a remote authenticated attacker to change the passwords of other users due to im… | |
| CVE-2026-16433 | MEDIUM | 6.5 | 2026-11-08 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to write arbitrary files due to a path traversal vulnerability. | |
| CVE-2026-16427 | MEDIUM | 6.5 | 2026-11-08 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to write arbitrary files due to a path traversal vulnerability. | |
| CVE-2026-16325 | MEDIUM | 4.4 | 2026-11-08 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary scripts due to improper neutralization of input in the X-Forwar… |