Loading story…
IBM published security bulletins through its support portal, continuing its practice of issuing product-specific advisories and remediation guidance for vulnerabilities affecting its software and services. The notices are distributed through IBM's bulletin infrastructure and serve as the primary source for customers tracking fixes, affected versions, and recommended mitigation steps.
A separate security update roundup from EG-FinCIRT drew attention to IBM advisories released on 7 July 2026, indicating that the bulletins remained active items for defender awareness and patch management. Organizations using IBM products were urged to review the relevant vendor notices, identify exposed deployments, and apply available updates or mitigations based on the affected product versions listed by IBM.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
IBM published a security advisory covering vulnerabilities affecting numerous enterprise products, including SPSS, MQ Agent, Maximo Application Suite components, Instana Agent, WebSphere Application Server, and webMethods Integration. Users and administrators were advised to review IBM guidance and apply applicable updates.
The Canadian Centre for Cyber Security published advisory AV26-789 stating that, as of August 7, 2026, multiple IBM products were affected by vulnerabilities and required administrators to review IBM guidance and apply updates. The notice listed numerous impacted offerings, including QRadar, WebSphere Application Server, WebSphere Liberty, Business Automation Workflow, Cloud Pak for Business Automation, Maximo Application Suite, and others.
A Canadian Centre for Cyber Security notice summarized IBM security advisories published between July 13 and 19, 2026. The advisories covered multiple IBM products, including API Connect, Cloud Object Storage System, Datacap, Guardium, QRadar applications, Sterling Secure Proxy, WebSphere Service Registry and Repository, and IBM i, and urged administrators to review and apply updates.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
6 references tracked. Mallory keeps watching after this page renders.
cirt.gy
Open sourcemalware.news
Open sourcecyber.gc.ca
Open sourcemalware.news
Open sourceegfincirt-wpn.azurewebsites.net
Open sourceibm.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
CISA released a series of Industrial Control System (ICS) security advisories addressing vulnerabilities in a wide range of products from vendors such as Advantech, Axis Communications, Hitachi Energy, Inductive Automation, Johnson Controls, Mitsubishi Electric, National Instruments, Rockwell Automation, Schneider Electric, and Siemens. These advisories urge administrators to review mitigation steps and apply available updates to protect critical infrastructure systems from potential exploitation. Separately, IBM published security advisories for multiple enterprise products, including IBM API Connect, CloudPak for AIOps, DataPower Gateway, Db2, QRadar Suite, and Watson services, among others. The advisories highlight critical updates and recommend immediate patching to address identified vulnerabilities. Both CISA and IBM emphasize the importance of timely remediation to reduce risk exposure in operational and enterprise environments.
Jun 29, 2026
IBM disclosed several security issues affecting products across its portfolio, including **IBM Cloud Databases for PostgreSQL**, **WebSphere Application Server**, **Liberty**, **IBM HTTP Server**, and **IBM Security Guardium**. The referenced advisories indicate exposure to widely tracked vulnerabilities such as the OpenSSL certificate parsing flaws `CVE-2022-3786` and `CVE-2022-3602`, alongside a Guardium command execution issue tracked as `CVE-2023-35893`. The notices show IBM assessing and publishing product-specific impact information through support bulletins and X-Force Exchange reporting, with Guardium highlighted for command execution risk and other enterprise offerings reviewed for inherited third-party component exposure. The disclosures underscore the need for organizations using affected IBM platforms to verify product impact, review vendor bulletins, and apply available fixes or mitigations to reduce the risk of exploitation in database, application server, web server, and data security environments.
Jul 12, 2026
IBM released security updates for multiple products after disclosures covering at least 21 high-severity vulnerabilities across **Langflow OSS**, **Application Gateway Operator**, **QRadar**, and **WebSphere Application Server**. The issues span remote code execution, arbitrary file read/write, information disclosure, security restriction bypass, and server-side request forgery, with national CERT and CSIRT notices urging organizations to apply IBM’s bulletins and upgrade affected deployments. Among the disclosed flaws, `CVE-2026-17624` affects **IBM Langflow OSS** versions `1.0.0` through `1.10.3` and allows a remote authenticated attacker to execute arbitrary code through improper validation of module imports in component generation, validation, and custom component handling. `CVE-2026-17617` affects **IBM Application Gateway Operator** versions `22.2.0` through `26.06` and enables SSRF through insufficient validation of URLs in custom resources; additional affected products include **QRadar** `7.6.0.1` and earlier in the `7.6.x` branch, **QRadar** `7.5.0 UP 15 IF05` and earlier in the `7.5.x` branch, **WebSphere Application Server** `8.5` and `9.0`, and **WebSphere Liberty Continuous Delivery`.
Aug 8, 2026