Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-16188 medium 5.3 No IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative lo... 2026-09-16
CVE-2026-16187 medium 6.5 No IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication and obtain sensitive information by sen... 2026-09-16
CVE-2026-16186 medium 5.4 No IBM WebSphere Application Server 9.0, and 8.5 is affected by a reflected cross-site scripting vulnerability. 2026-09-16
CVE-2026-16185 medium 6.4 No IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication on an admin console servlet. 2026-09-16
CVE-2026-19543 medium 6.2 No IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on... 2026-09-16
CVE-2026-18515 medium 4.3 No IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to place files into the file system with Navigator for i when they... 2026-09-16
CVE-2026-18151 medium 4.2 No IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition during the... 2026-09-16
CVE-2026-63523 medium 6.1 No Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker t... 2026-09-16
CVE-2026-12752 high 7.1 No IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing X... 2026-09-16
CVE-2026-12355 high 8.1 No IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through... 2026-09-16
CVE-2026-12354 high 7.5 No IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through... 2026-09-16
CVE-2026-12351 critical 9.8 No IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 LTS, and 10.0.0.0 cou... 2026-09-16
CVE-2026-11934 high 7.2 No IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation o... 2026-09-16
CVE-2026-11929 high 7.5 No IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of use... 2026-09-16
CVE-2026-11729 high 8.5 No IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through... 2026-09-16
CVE-2026-11728 high 8.1 No IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through... 2026-09-16
CVE-2026-12756 high 7.1 No IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing X... 2026-09-16
CVE-2026-19290 high 7.5 No IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive... 2026-09-16
CVE-2026-13293 high 8.8 No IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through... 2026-09-16
CVE-2026-13276 medium 6.1 No IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and... 2026-09-16