IBM
In 7 briefs, most recently 6 August 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
8 IBM vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 2 of them used in ransomware campaigns. Most recent:
- CVE-2026-9198 IBM Langflow Code Injection Vulnerability
- CVE-2022-47986 IBM Aspera Faspex Code Execution Vulnerability
- CVE-2013-3993 IBM InfoSphere BigInsights Invalid Input Vulnerability
- CVE-2015-7450 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
- CVE-2020-4430 IBM Data Risk Manager Directory Traversal Vulnerability
- CVE-2020-4428 IBM Data Risk Manager Remote Code Execution Vulnerability
- CVE-2020-4427 IBM Data Risk Manager Security Bypass Vulnerability
- CVE-2019-4716 IBM Planning Analytics Remote Code Execution Vulnerability
Coverage in DanSec Daily
- Oracle database hack via khunt toolkit, Snowflake data theft guilty plea, and actively exploited JetBrains TeamCity RCE.
- Google and FBI disrupt NetNut proxy network, Scattered Spider suspect extradited, and Pegasus spyware hits EU Parliament investigators; plus Cursor and WinRAR …
- Charter and Carnival breaches by ShinyHunters, FortiClient EMS CVE-2026-35616 exploitation, and Gogs and Gitea flaws.
- Odido breach hits 6 million customers, BeyondTrust RS/PRA CVE-2026-1731 exploited within 24 hours of PoC, and Chrome extensions steal Meta Business Suite …
- The Trust Wallet Chrome extension theft, Ivanti EPMM zero-day attacks, and the DarkSpectre browser extension campaign hitting 2.2 million users.
- The Gogs zero-day hitting 700+ servers, the LastPass £1.2M ICO fine, Gladinet CentreStack exploitation, and WIRTE's AshTag malware campaign.
- ShinyHunters vishing breaches at Qantas, Allianz Life and Adidas; SafePay claims 3.5TB Ingram Micro theft; Microsoft SharePoint mass exploitation hits South …