ZeusQA
Start free

Known exploited vulnerabilities

IBM vulnerabilities attackers have used

Every IBM vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 9 IBM vulnerabilities as exploited in the wild, 2 of them added in the last 12 months and 2 used in ransomware campaigns. The most recent is CVE-2026-123218, added Nov 9, 2026. Data Risk Manager has the most entries (3).

In KEV, all time
9
Added, last 12 months
2
Used in ransomware
2
New CVEs this week
2

By product

Data Risk Manager (3), Aspera Faspex (2), InfoSphere BigInsights (1), Langflow (1), Planning Analytics (1), WebSphere Application Server and Server Hypervisor Edition (1).

New Critical and High IBM CVEs this week

  • CVE-2026-118904highIBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.
  • CVE-2026-107331criticalIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.

Every IBM entry in CISA KEV

  1. CVE-2026-123218

    Added · due

    IBM Aspera Faspex Incorrect Authorization Vulnerability

    IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.

  2. CVE-2026-9198

    Added · due

    IBM Langflow Code Injection Vulnerability

    Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.

  3. CVE-2022-47986

    RansomwareAdded · due

    IBM Aspera Faspex Code Execution Vulnerability

    IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.

  4. CVE-2013-3993

    RansomwareAdded · due

    IBM InfoSphere BigInsights Invalid Input Vulnerability

    Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.

  5. CVE-2015-7450

    Added · due

    IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.

    Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands

  6. CVE-2020-4430

    Added · due

    IBM Data Risk Manager Directory Traversal Vulnerability

    IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.

  7. CVE-2020-4428

    Added · due

    IBM Data Risk Manager Remote Code Execution Vulnerability

    IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�

  8. CVE-2020-4427

    Added · due

    IBM Data Risk Manager Security Bypass Vulnerability

    IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could…

  9. CVE-2019-4716

    Added · due

    IBM Planning Analytics Remote Code Execution Vulnerability

    IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works