831
CVEs
159
Critical
354
High
1
KEV
4
PoC
91
Unpatched C/H
82.8%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
159
HIGH
354
MEDIUM
299
LOW
13
Monthly CVE Trend
Affected Products (30)
Websphere Application Server
271
Aix
234
Db2
224
Sterling B2b Integrator
153
Maximo Asset Management
149
Infosphere Information Server
145
Qradar Security Information And Event Manager
130
Vios
124
Websphere Portal
105
Rational Doors Next Generation
99
Langflow Oss
97
Rational Quality Manager
95
Powervm Vios
95
Java
93
Sterling File Gateway
85
Rational Engineering Lifecycle Manager
84
Rational Team Concert
84
Security Guardium
81
Security Verify Access
77
Business Process Manager
76
Open Redirect
69
Rational Collaborative Lifecycle Management
68
Cognos Analytics
64
Smartcloud Control Desk
62
Security Key Lifecycle Manager
58
Websphere Mq
54
Rational Rhapsody Design Manager
54
Concert
53
Api Connect
53
Windows
52
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-9198 | Unauthenticated remote code execution in IBM Langflow OSS versions 1.0.0 through 1.10.0 lets any network-reachable attacker achieve full RCE on default deployments by chaining two endpoints: /api/v1/auto_login, which mints SUPERUSER tokens to any caller, and /api/v1/validate/code, which passes user-supplied code to Python's exec(). CVSS is 9.8 (AV:N/AC:L/PR:N/UI:N) and a vendor patch is available; there is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV. | CRITICAL | 9.8 | 0.4% | 134 |
KEV
PoC
|
| CVE-2026-19295 | Authenticated command injection in IBM Langflow OSS 1.0.0 through 1.11.1 lets any logged-in flow user escalate to arbitrary OS command execution under the server process identity. By saving a flow containing a crafted 'type' field and triggering a build of a wrapper flow that references it, the attacker coerces the backend into evaluating attacker-controlled code, defeating the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false guardrail intended to block custom code execution. The vendor (IBM) reported it and has released a fix; there is no public exploit identified at time of analysis and it is not in CISA KEV. | CRITICAL | 9.9 | 1.0% | 85 |
PoC
|
| CVE-2026-18729 | Remote code execution in IBM Langflow OSS 1.0.0 through 1.11.1 allows a network-accessible authenticated attacker with low privileges to inject and execute arbitrary code server-side due to improper control of code generation (CWE-94). The CVSS 8.8 High score reflects low attack complexity, no required user interaction, and full confidentiality, integrity, and availability impact against the vulnerable host. IBM has released a patch; no public exploit or CISA KEV listing is identified at time of analysis. | HIGH | 8.8 | 0.5% | 79 |
PoC
|
| CVE-2026-10561 | Unauthenticated remote code execution in IBM Langflow OSS versions 1.0.0 through 1.9.3 allows attackers to fully compromise the host by bypassing authentication and abusing improper Python execution isolation. The maximum CVSS 10.0 score (AV:N/AC:L/PR:N/UI:N with scope change) reflects trivial network-based exploitation against any internet-exposed instance, though no public exploit identified at time of analysis. IBM has confirmed the issue and released a patch via support advisory node/7277242. | CRITICAL | 10.0 | 0.5% | 51 |
|
| CVE-2026-18193 | Security-restriction bypass in IBM i (the operating system for IBM Power servers, formerly OS/400) versions 7.3 through 7.6 lets a remote attacker abuse improper validation of user-controlled addresses to elevate privileges and cross a security boundary. Vendor scoring rates this a maximum-severity, unauthenticated network flaw (CVSS 10.0, scope-changed), though there is no public exploit identified at time of analysis and EPSS exploitation probability is low (0.33%). IBM published a fix, and CISA's SSVC framework currently marks exploitation as 'none' with a 'total' technical impact. | CRITICAL | 10.0 | 0.3% | 50 |
|
| CVE-2026-10134 | Remote code execution in IBM Langflow OSS 1.0.0 through 1.9.3 lets an unauthenticated attacker inject and run arbitrary Python via the flow `tool_code` mechanism, gaining full control of the Langflow process. Because the scope changes (S:C), the attacker can read every process secret, read and tamper with all flows, conversations, messages, uploads and saved components in the database, reach internal services and cloud metadata endpoints, and pivot across tenants on the same instance. This is a maximum-severity (CVSS 10.0) flaw, though no public exploit has been identified at time of analysis and it is not listed in CISA KEV. | CRITICAL | 10.0 | 0.3% | 50 |
No patch
|
| CVE-2026-9135 | Arbitrary Python code execution in IBM Langflow OSS 1.0.0 through 1.10.0 (Langflow versions up to 1.9.2) allows authenticated users with flow-creation privileges to bypass the allow_custom_components=false control via the Policies component's ToolGuard integration. Because validation only inspects the main component code and ignores dynamic CodeInput fields, attackers persist malicious Python in a flow that runs server-side when a guarded tool executes. No public exploit has been identified at time of analysis, but the flaw is IBM-confirmed with a vendor patch and carries a critical 9.9 CVSS due to cross-tenant escalation through the agentic MCP update_flow_component_field tool. | CRITICAL | 9.9 | 0.8% | 50 |
|
| CVE-2026-15068 | OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands through the Network Installation Manager (NIM) component. Because NIM typically operates with high (often root-level) privilege and the CVSS scope is Changed, successful exploitation can compromise the underlying operating system with full confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and it is not on CISA KEV, but the 9.9 base score and low attack complexity make it a high-priority patch for IBM Power estates. | CRITICAL | 9.9 | 0.8% | 50 |
|
| CVE-2026-16816 | OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute arbitrary operating-system commands due to improper neutralization of special elements (CWE-78). Rated CVSS 9.9 with a scope change, a successful low-privilege attacker can break out of the application context and run commands on the underlying enterprise Unix host, threatening confidentiality, integrity, and availability. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the near-maximum score and network reachability make it a high-priority patch. | CRITICAL | 9.9 | 0.8% | 50 |
|
| CVE-2026-18835 | OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker run arbitrary operating-system commands due to improper neutralization of special elements (CWE-78). IBM PSIRT rates it CVSS 9.9 with a scope change, reflecting that an authenticated foothold can be escalated into full host compromise across the confidentiality, integrity, and availability dimensions. No public exploit identified at time of analysis and it is not listed in CISA KEV, so the current threat is potential rather than confirmed in-the-wild activity. | CRITICAL | 9.9 | 0.8% | 50 |
No patch
|
| CVE-2026-16956 | OS command injection in IBM Db2 Mirror for i (releases 7.4, 7.5, and 7.6) lets a remote, unauthenticated attacker execute arbitrary operating-system commands on the affected IBM i host by injecting unneutralized special characters into a command the product builds and runs. The flaw is rated CVSS 9.8 with full confidentiality, integrity, and availability impact and a network attack vector requiring no privileges or user interaction. No public exploit has been identified at time of analysis, but a vendor patch is available and the low attack complexity makes this a high-priority fix. | CRITICAL | 9.8 | 1.0% | 50 |
|
| CVE-2026-8476 | Remote code execution in IBM Langflow OSS 1.0.0 through 1.10.0 allows attackers to run arbitrary code by planting a malicious pickle payload that the AsyncDiskCache deserializes with unauthenticated pickle.loads(). Any actor able to influence cached data - via file system access, crafted workflow inputs, custom components, or API manipulation - gains full compromise at the privilege of the Langflow server process. Rated CVSS 9.9 and reported by IBM with a vendor patch available; no public exploit identified at time of analysis. | CRITICAL | 9.9 | 0.5% | 50 |
|
| CVE-2026-16860 | Remote code execution in IBM i 7.3, 7.4, 7.5, and 7.6 allows an authenticated attacker to run arbitrary code by abusing an uncontrolled search path element (CWE-427), where a program resolves a library, service program, or executable from an attacker-influenceable location. Because the CVSS scope is changed (S:C), successful exploitation can execute code in a security context beyond the attacker's own low-privileged account, effectively enabling privilege escalation on this enterprise Power-based operating system. IBM has released a fix and there is no public exploit identified at time of analysis, but the 9.9 base score reflects severe impact once a foothold exists. | CRITICAL | 9.9 | 0.5% | 50 |
|
| CVE-2026-8481 | Authenticated remote code execution in IBM Langflow OSS 1.0.0 through 1.10.0 lets any logged-in user run arbitrary Python — and therefore arbitrary OS commands — with the privileges of the Langflow server process. The flaw is a design failure in the POST /api/v1/validate/code endpoint, which passes user-supplied code straight into Python's exec() with no sandbox, validation, or privilege drop. Rated CVSS 9.9 by IBM; no public exploit identified at time of analysis, though the trivial exec()-based trigger makes exploitation straightforward once authenticated. | CRITICAL | 9.9 | 0.4% | 50 |
|
| CVE-2026-17142 | Improper authentication in IBM AIX 7.2 and 7.3, and in IBM PowerVM VIOS 4.1, allows a remote attacker to execute arbitrary commands on affected systems. The flaw carries a critical CVSS 9.8 rating (network-reachable, no privileges or user interaction) and, per IBM's own PSIRT advisory, an authentication bypass can lead to full command execution. No public exploit has been identified at time of analysis, and the CVE is not listed in CISA KEV. | CRITICAL | 9.8 | 0.9% | 50 |
No patch
|