Veille CVE

Septembre 2026

422 CVE

Critique 45 Élevée 192 Moyenne 169 Faible 13 Non évaluée 3 Exploitées (KEV) Tri : plus récentes « IBM i » ✕
  1. CVE-2026-84842 8.1 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity.

  2. CVE-2026-84440 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs with root privileges.

  3. CVE-2026-84436 9.1 Critique

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges.

  4. CVE-2026-84422 7.2 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges.

  5. CVE-2026-84421 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction.

  6. CVE-2026-84414 7.8 Élevée

    IBM i

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path.

  7. CVE-2026-93306 7.1 Élevée

    IBM Server Firmware · Ibm power system e1080 \(9080-hex\) firmware · Ibm power system e1180 \(9080-heu\) firmware · Ibm power system s922 \(9009-22g\) firmware

    IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can send a malformed HTTPS request to ASMI, causing the web server to crash with possible memory corruption and generate an error log. The ASMI web interface will restart automatically; however, repeated exploitation could result in a sustained loss of access to the ASMI management interface, resulting in an integrity and availability impact.

  8. CVE-2026-93030 6.5 Moyenne

    IBM Financial Transaction Manager (FTM) for Redhat OpenShift

    FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw.

  9. CVE-2026-84882 6.5 Moyenne

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system.

  10. CVE-2026-84862 7.2 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could exploit this vulnerability to execute arbitrary code on the affected system.

  11. CVE-2026-85542 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution with elevated privileges on the Central Manager.

  12. CVE-2026-85029 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory.

  13. CVE-2026-84893 6.5 Moyenne

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database.

  14. CVE-2026-84884 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token.

  15. CVE-2026-97526 – Non évaluée

    Linux

    In the Linux kernel, the following vulnerability has been resolved: s390/pai: Support CPU hotplug for PMU PAI The command 'perf stat -e pai_crypto/CRYPTO_ALL/ -- <command>' crashes the kernel when CPUs are hotplug added during that run. Root cause is the missing allocation of per-CPU data structures for that new CPU. The allocation is dynamic and the first event that has task context creates such a structure for each online CPU. This is not sufficient. CPUs may be offline during event creation and can be set online during the perf run time. For example commands # echo 0 > /sys/devices/system/cpu/cpu1/online # perf stat -e cycles -i -- stress-ng -t10s --matrix X # sleep 1 # echo 1 > /sys/devices/system/cpu/cpu1/online Currently without a CPU hotplug handler, that new CPU has no per-CPU data infrastructure. The scheduler runs PMU call back function pai_add() to install the PMU support for that CPU before the task is being scheduled on that new CPU. In pai_add() instructions mp = this_cpu_ptr(pai_root[idx].mapptr); cpump = mp->mapptr; return a NULL pointer and the result is a kernel panic as variable cpump is used inside that function. Add CPU hotplug support for CPU add and delete and create the necessary per-CPU data infrastructure during CPU hotplug add processing. Same for CPU hotplug remove. This is done when the CPU is offline to ensure the data structures are available when CPU is made online and tasks are scheduled on it. [hca@linux.ibm.com: fixup error path in pai_init()]

  16. CVE-2026-97411 – Non évaluée

    Linux

    In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal_remove() napi_disable() is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPI_STATE_SCHED bit to clear. In mal_remove(), napi_disable() is called unconditionally. If no MACs were registered, NAPI was never enabled. Also, if they were registered but subsequently unregistered, NAPI was already disabled in mal_unregister_commac(). In either case, calling napi_disable() causes the kernel to hang upon module removal. Fix this by only calling napi_disable() in mal_remove() if the commac list is not empty (which implies NAPI is enabled).

  17. CVE-2026-82094 7.1 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to improper limitation of a pathname to a restricted directory.

  18. CVE-2026-82093 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserialization of untrusted data.

  19. CVE-2026-81552 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of environment variables.

  20. CVE-2026-81549 7.7 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header.

  21. CVE-2026-81548 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

  22. CVE-2026-81547 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to path traversal.

  23. CVE-2026-81545 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

  24. CVE-2026-81539 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

  25. CVE-2026-77874 8.6 Élevée

    IBM Enterprise Build of Quarkus

    IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

  26. CVE-2026-77825 4.9 Moyenne

    IBM ContextForge MCP Gateway · Ibm contextforge

    IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`). The path confinement check uses `str.startswith()` rather than proper boundary validation, allowing an authenticated admin to read `.log`, `.jsonl`, and `.json` files outside the configured `LOG_FOLDER` by supplying a filename that resolves into a sibling directory whose absolute path shares the log directory's string prefix.

  27. CVE-2026-6544 6.2 Moyenne

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface.

  28. CVE-2026-19492 3.2 Faible

    IBM PowerVM Hypervisor · Ibm power system s1122 \(9824-22a\) firmware · Ibm power system s1124 \(9824-42a\) firmware · Ibm power system s1122s \(9824-22b\) firmware

    IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing sensitive data belonging to the hypervisor or other guest partitions hosted on the same system, resulting in a confidentiality impact. The attacker has no control over which memory contents are returned. This vulnerability is of particular concern in multi-tenant environments where guests may run arbitrary OS images.

  29. CVE-2026-18870 4.3 Moyenne

    IBM PowerVM Hypervisor · Ibm power system s1122 \(9824-22a\) firmware · Ibm power system s1124 \(9824-42a\) firmware · Ibm power system s1122s \(9824-22b\) firmware

    IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.

  30. CVE-2026-18857 3.4 Faible

    IBM OPENBMC · Ibm power system s1122 \(9824-22a\) firmware · Ibm power system s1124 \(9824-42a\) firmware · Ibm power system s1122s \(9824-22b\) firmware

    IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.

  31. CVE-2026-18104 3.3 Faible

    IBM Db2 Mirror for i

    IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook (ECB) mode for encryption.

  32. CVE-2026-17511 3.4 Faible

    IBM PowerVM Hypervisor · Ibm power system s1122 \(9824-22a\) firmware · Ibm power system s1124 \(9824-42a\) firmware · Ibm power system s1122s \(9824-22b\) firmware

    IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a confidentiality impact to the managed system.

  33. CVE-2026-17504 4.4 Moyenne

    IBM PowerVM Hypervisor · Ibm power system s1122 \(9824-22a\) firmware · Ibm power system s1124 \(9824-42a\) firmware · Ibm power system s1122s \(9824-22b\) firmware

    IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the partition firmware runtime, causing it to crash with possible memory corruption.

  34. CVE-2026-17503 5.1 Moyenne

    IBM PowerVM Hypervisor · Ibm power system s1122 \(9824-22a\) firmware · Ibm power system s1124 \(9824-42a\) firmware · Ibm power system s1122s \(9824-22b\) firmware

    IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter partition nvram, causing the partition to fail to boot. This condition persists until operator intervention — deleting and recreating the partition configuration — to restore normal operation. Successful exploitation results in an integrity and availability impact.

  35. CVE-2026-17413 5.1 Moyenne

    IBM PowerVM Hypervisor · Ibm power system s1122 \(9824-22a\) firmware · Ibm power system s1124 \(9824-42a\) firmware · Ibm power system s1122s \(9824-22b\) firmware

    IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the RTAS firmware-to-OS interface. An attacker with administrator-level (root) access to a logical partition can send a specially crafted request to partition firmware, causing the partition to crash and become unavailable. Other partitions on the same managed system are not affected.

  36. CVE-2026-81537 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection.

  37. CVE-2026-81536 7.7 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.

  38. CVE-2026-81208 7.7 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.

  39. CVE-2026-80423 6.5 Moyenne

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of namespace-wide secrets via accessible file mounts.

  40. CVE-2026-80425 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

  41. CVE-2026-80412 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values during OSH script generation.

  42. CVE-2026-80379 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

  43. CVE-2026-6935 7.8 Élevée

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attacker with local system access can manipulate the search path environment to execute untrusted or malicious code.

  44. CVE-2026-6928 9.8 Critique

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.

  45. CVE-2026-6925 5.3 Moyenne

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.

  46. CVE-2026-6794 7.8 Élevée

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process.

  47. CVE-2026-6730 7.8 Élevée

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.

  48. CVE-2026-6721 9.8 Critique

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command execution on the underlying system. Successful exploitation allows remote code execution with the privileges of the affected application.

  49. CVE-2026-6718 6.2 Moyenne

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files.

  50. CVE-2026-6327 4.3 Moyenne

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

  51. CVE-2026-4921 2.7 Faible

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

  52. CVE-2026-3626 5.3 Moyenne

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

  53. CVE-2026-19267 6.2 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint (`CommandsResource.java:31`). A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functions.

  54. CVE-2026-19179 8.2 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a boolean expression.

  55. CVE-2026-19087 4.4 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege escalation within the container due to improper privilege management.

  56. CVE-2026-18875 7.3 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in the FTM AI agent server (api.vectordb.runbooks.js:51). An unauthenticated attacker can insert malicious runbook content into the agent's vector database to steer AI-driven MCP tool calls, potentially triggering unauthorized payment actions or exfiltrating payment data.

  57. CVE-2026-18872 9.3 Critique

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkAcknowledgement.jsx:42). A malicious actor can inject script into stored network acknowledgement data that executes in authenticated operator browsers, enabling session hijacking and unauthorized operator-level payment actions.

  58. CVE-2026-18505 5.4 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to open redirect in the PMP `HostHeaderFilter` (`HostHeaderFilter.java:151`). An unauthenticated attacker can craft a request with a manipulated `Host` header to redirect authenticated operators to attacker-controlled sites, enabling credential phishing.

  59. CVE-2026-18490 8.8 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint (BrmRMISSLServerSocketFactory.java:95, EP8). An adjacent-network attacker can deliver a crafted serialized payload to achieve arbitrary code execution, exposing all PayDir credentials and enabling manipulation of payment business rules.

  60. CVE-2026-18185 7.3 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system configurations due to missing authentication for a critical function.

  61. CVE-2026-18184 7.4 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

  62. CVE-2026-18181 8.1 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key.

  63. CVE-2026-18180 6.5 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.

  64. CVE-2026-18179 6.5 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization.

  65. CVE-2026-18177 7.1 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks.

  66. CVE-2026-18176 7.4 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.

  67. CVE-2026-18173 3.7 Faible

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS authentication.

  68. CVE-2026-18172 7.4 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.

  69. CVE-2026-18170 6.5 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling.

  70. CVE-2026-18169 9.9 Critique

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links.

  71. CVE-2026-18163 9.8 Critique

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper deserialization of untrusted data.

  72. CVE-2026-18162 9.8 Critique

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor.

  73. CVE-2026-18161 4.3 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.

  74. CVE-2026-18156 6.5 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper authorization.

  75. CVE-2026-18154 7.5 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to the use of a hard-coded or predictable cryptographic key.

  76. CVE-2026-18153 7.1 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the use of hard-coded cryptographic keys and initialization vectors.

  77. CVE-2026-18152 7.5 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures.

  78. CVE-2026-18137 8.1 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements used in an ESQL command.

  79. CVE-2026-18134 7.5 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.

  80. CVE-2026-18133 6.5 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to path traversal.

  81. CVE-2026-18132 6.5 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unauthorized payment mutation actions due to missing authorization.

  82. CVE-2026-18131 6.1 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScript in an authenticated user's browser due to improper neutralization of HTML input.

  83. CVE-2026-18124 6.5 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.

  84. CVE-2026-18123 7.5 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to the improper use of reflection with externally controlled input.

  85. CVE-2026-18114 7.5 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization.

  86. CVE-2026-18095 8.8 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.

  87. CVE-2026-18074 7.5 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper authentication and missing authorization.

  88. CVE-2026-18066 7.1 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and trigger unauthorized actions due to server-side request forgery.

  89. CVE-2026-17647 8.8 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.

  90. CVE-2026-17646 6.5 Moyenne

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references.

  91. CVE-2026-17645 8.8 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management.

  92. CVE-2026-17644 7.1 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials.

  93. CVE-2026-17643 7.1 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.

  94. CVE-2026-17637 8.8 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.

  95. CVE-2026-17636 8.8 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity.

  96. CVE-2026-17635 9.1 Critique

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based security constraints.

  97. CVE-2026-17620 7.5 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

  98. CVE-2026-17618 9.8 Critique

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.

  99. CVE-2026-17472 9.6 Critique

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources due to the use of wildcards in RBAC permission definitions.

  100. CVE-2026-17465 6.5 Moyenne

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper enforcement of storage limits.

  101. CVE-2026-17102 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

  102. CVE-2026-16672 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

  103. CVE-2026-16469 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

  104. CVE-2026-16468 8.8 Élevée

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection.

  105. CVE-2026-16426 6.5 Moyenne

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

  106. CVE-2026-16346 9.9 Critique

    IBM DataStage on Cloud Pak for Data

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

  107. CVE-2026-15915 6.2 Moyenne

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images.

  108. CVE-2025-36084 5.9 Moyenne

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

  109. CVE-2025-12767 5.3 Moyenne

    IBM Concert

    IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that would cause excessive resource consumption.

  110. CVE-2026-84241 8.1 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization.

  111. CVE-2026-84239 7.6 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.

  112. CVE-2026-84108 8.1 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation.

  113. CVE-2026-84106 8.9 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.

  114. CVE-2026-84105 7.7 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.

  115. CVE-2026-84089 7.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.

  116. CVE-2026-84086 7.2 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.

  117. CVE-2026-84085 8.1 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command.

  118. CVE-2026-84084 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery (CSRF) vulnerability.

  119. CVE-2026-84083 7.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands as root, resulting in full compromise of the Collector appliance.

  120. CVE-2026-84082 9.8 Critique

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

  121. CVE-2026-84081 8.1 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation.

  122. CVE-2026-84078 9.9 Critique

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected system.

  123. CVE-2026-84077 8.1 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability.

  124. CVE-2026-84076 7.6 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.

  125. CVE-2026-84075 9.9 Critique

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet.

  126. CVE-2026-84074 8.9 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.

  127. CVE-2026-84073 9.1 Critique

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

  128. CVE-2026-84071 7.2 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in arbitrary command execution with root-level privileges.

  129. CVE-2026-84070 8.9 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.

  130. CVE-2026-84064 9.9 Critique

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

  131. CVE-2026-84036 7.4 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.

  132. CVE-2026-84034 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise of sensitive system information.

  133. CVE-2026-84031 9.0 Critique

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.

  134. CVE-2026-82967 9.8 Critique

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface.

  135. CVE-2026-82896 7.6 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due to a path traversal vulnerability.

  136. CVE-2026-82893 7.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.

  137. CVE-2026-82892 8.1 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

  138. CVE-2026-82890 5.9 Moyenne

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input during web page generation.

  139. CVE-2026-82887 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

  140. CVE-2026-82885 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing authorization in the REST API.

  141. CVE-2026-82832 9.6 Critique

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.

  142. CVE-2026-82340 9.8 Critique

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System (CAS) listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause unintended code execution in the Guardium appliance.

  143. CVE-2026-81937 7.2 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter, potentially resulting in arbitrary command execution with root privileges and impact to the confidentiality, integrity, and availability of the affected system.

  144. CVE-2026-81933 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A low-privileged authenticated user can inject SQL statements through the analytic cases grid endpoint, potentially resulting in unauthorized access to sensitive data and impact to the confidentiality, integrity, and availability of the affected system.

  145. CVE-2026-81669 7.2 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges.

  146. CVE-2026-81657 9.8 Critique

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data.

  147. CVE-2026-81656 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially resulting in unauthorized access to data and impact to the confidentiality, integrity, and availability of the affected system.

  148. CVE-2026-81626 8.6 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL statements through the Load Balancer Servlet endpoint, potentially resulting in unauthorized access to data and impact to the confidentiality, integrity, and availability of the affected system.

  149. CVE-2026-81623 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input.

  150. CVE-2026-80442 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCertificate functionality. Successful exploitation could allow an attacker to execute unauthorized commands and impact the confidentiality, integrity, and availability of the affected system.