# IBM vulnerabilities Source: https://junglewise.ai/threats/vendors/ibm Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/ibm.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 1,602 vulnerabilities in IBM: 285 in the last 7 days and 1,113 in the last 90 days, 235 of them critical and 9 exploited in the wild. The most recent, CVE-2026-96146, was published on 8 November 2026. 469 vulnerabilities in the last four weeks, up 34% on the four before (350). 72 critical against 45, 1 exploited in the wild against 0. 105 technologies have a page of their own. ## Counts - Last 7 days: 285 - Last 30 days: 391 - Last 90 days: 1113 - All time: 1602 (235 critical, 9 exploited in the wild) ## About IBM American multinational technology and consulting corporation. ## Latest IBM vulnerabilities - [CVE-2026-96146: IBM SevOne Network Performance Management denial of service](https://junglewise.ai/threats/cve-2026-96146-ibm-sevone-network-performance-management-7-0-0-through-8-2-2) (high, CVSS 7.5, published 8 Nov 2026) - [CVE-2026-95867: IBM SevOne Network Performance Management buffer overflow](https://junglewise.ai/threats/cve-2026-95867-ibm-sevone-network-performance-management-7-0-0-through-8-2-2) (medium, CVSS 6.7, published 8 Nov 2026) - [CVE-2026-17427: IBM Power Systems firmware denial of service via input validation](https://junglewise.ai/threats/cve-2026-17427-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-op940-00) (medium, CVSS 6.5, published 8 Nov 2026) - [CVE-2026-17426: IBM Power Systems OpenBMC denial of service via unhandled exception](https://junglewise.ai/threats/cve-2026-17426-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-could) (medium, CVSS 6.5, published 8 Nov 2026) - [CVE-2026-16697: IBM Power Systems firmware denial of service in BMC](https://junglewise.ai/threats/cve-2026-16697-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-op940-00) (medium, CVSS 6.5, published 8 Nov 2026) - [CVE-2026-16682: IBM Power Systems Firmware denial of service in BMC IPMI](https://junglewise.ai/threats/cve-2026-16682-ibm-power-systems-firmware-fw1120-00-through-fw1120-01-fw1110-00) (medium, CVSS 6.5, published 8 Nov 2026) - [CVE-2026-118904: IBM webMethods Integration Server authentication bypass in 2FA](https://junglewise.ai/threats/cve-2026-118904-ibm-webmethods-integration-server-12-1-could-allow-a-remote) (high, CVSS 8.1, published 8 Nov 2026) - [CVE-2026-9764: IBM Bob code injection in MCP server execution](https://junglewise.ai/threats/cve-2026-9764-ibm-bob-1-0-4-through-2-0-1-could-allow-a-remote-attacker-to) (high, CVSS 8.8, published 8 Nov 2026) - [CVE-2026-97677: IBM Langflow OSS path traversal arbitrary file read and write](https://junglewise.ai/threats/cve-2026-97677-ibm-langflow-oss-1-0-0-through-1-12-2-an-authenticated-flow) (high, CVSS 8.1, published 8 Nov 2026) - [CVE-2026-93005: IBM Process Mining denial of service through email rate limiting bypass](https://junglewise.ai/threats/cve-2026-93005-ibm-process-mining-2-0-0-through-2-2-1-could-allow-an) (medium, CVSS 6.5, published 8 Nov 2026) - [CVE-2026-8860: IBM Security Verify Directory credential exposure in GET requests](https://junglewise.ai/threats/cve-2026-8860-ibm-security-verify-directory-10-0-0-through-10-0-4-and-ibm-verify) (medium, CVSS 6.5, published 8 Nov 2026) - [CVE-2026-8642: IBM Security Verify Directory information disclosure via debug endpoints](https://junglewise.ai/threats/cve-2026-8642-ibm-security-verify-directory-10-0-0-through-10-0-4-and-ibm-verify) (medium, CVSS 4.3, published 8 Nov 2026) - [CVE-2026-8639: IBM Security Verify Directory session fixation in Web Application](https://junglewise.ai/threats/cve-2026-8639-ibm-security-verify-directory-10-0-0-through-10-0-4-and-ibm-verify) (high, CVSS 8.8, published 8 Nov 2026) - [CVE-2026-84229: IBM Guardium Data Protection CSRF token bypass in GET requests](https://junglewise.ai/threats/cve-2026-84229-ibm-guardium-data-protection-12-2-4-could-allow-a-remote-attacker) (medium, CVSS 6.5, published 8 Nov 2026) - [CVE-2026-84030: IBM Guardium Data Protection SQL injection](https://junglewise.ai/threats/cve-2026-84030-ibm-guardium-data-protection-12-2-4-could-allow-a-remote-attacker) (medium, CVSS 5.6, published 8 Nov 2026) - [CVE-2026-82830: IBM Guardium Data Protection argument injection](https://junglewise.ai/threats/cve-2026-82830-ibm-guardium-data-protection-12-2-4-could-allow-a-remote) (medium, CVSS 6.7, published 8 Nov 2026) - [CVE-2026-81542: IBM DataStage path traversal arbitrary file deletion](https://junglewise.ai/threats/cve-2026-81542-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (medium, CVSS 6.4, published 8 Nov 2026) - [CVE-2026-81209: IBM Sterling B2B Integrator and File Gateway sensitive information in logs](https://junglewise.ai/threats/cve-2026-81209-ibm-sterling-b2b-integrator-6-2-1-0-through-6-2-1-2-1-6-2-2-0-6-2) (medium, CVSS 4.9, published 8 Nov 2026) - [CVE-2026-80435: IBM DataStage XXE injection in Cloud Pak for Data](https://junglewise.ai/threats/cve-2026-80435-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (medium, CVSS 5, published 8 Nov 2026) - [CVE-2026-78636: IBM WebSphere Application Server Liberty information disclosure in JMX REST connector](https://junglewise.ai/threats/cve-2026-78636-ibm-websphere-application-server-liberty-17-0-0-3-through-26-0-0) (medium, CVSS 4.3, published 8 Nov 2026) - [CVE-2026-78537: IBM Guardium Key Lifecycle Manager weak cryptographic algorithm](https://junglewise.ai/threats/cve-2026-78537-ibm-guardium-key-lifecycle-manager-4-1-4-1-1-4-2-4-2-1-5-0-and-5) (medium, CVSS 6.8, published 8 Nov 2026) - [CVE-2026-77153: IBM i missing authorization in Host-Based Printer Subsystem](https://junglewise.ai/threats/cve-2026-77153-ibm-i-7-6-7-5-7-4-and-7-3-could-allow-a-remote-unauthenticated) (medium, CVSS 4.8, published 8 Nov 2026) - [CVE-2026-75879: IBM Content Navigator LDAP injection](https://junglewise.ai/threats/cve-2026-75879-ibm-content-navigator-3-0-15-0-26-0-0-0-3-1-0-0-and-3-2-0-0-is) (medium, CVSS 4.3, published 8 Nov 2026) - [CVE-2026-6715: IBM Concert command injection vulnerability](https://junglewise.ai/threats/cve-2026-6715-ibm-concert-1-0-through-3-0-1-1-allows-an-attacker-can-supply) (critical, CVSS 9.8, published 8 Nov 2026) - [CVE-2026-3684: IBM Cloud Pak for Data System arbitrary file access via incorrect permissions](https://junglewise.ai/threats/cve-2026-3684-ibm-cloud-pak-for-data-system-11-3-1-2-interim-fix-001-through-11) (medium, CVSS 6.5, published 8 Nov 2026) ## Most severe IBM vulnerabilities - [CVE-2026-9198: IBM Langflow OSS remote code execution via auto-login bypass](https://junglewise.ai/threats/cve-2026-9198-ibm-langflow-oss-remote-code-execution-via-auto-login-bypass) (critical, exploited in the wild, CVSS 9.8, published 17 Jul 2026) - [CVE-2026-123218: IBM Aspera Faspex authorization bypass](https://junglewise.ai/threats/cve-2026-123218-ibm-aspera-faspex-5-0-0-through-5-0-19-could-allow-an-authorized) (critical, exploited in the wild, CVSS 9.8, published 7 Nov 2026) - [CVE-2022-47986: IBM Aspera Faspex Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-47986-ibm-aspera-faspex-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 21 Feb 2023) - [CVE-2015-7450: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.](https://junglewise.ai/threats/cve-2015-7450-ibm-websphere-application-server-and-server-hypervisor-edition) (critical, exploited in the wild, CVSS 9.8, published 10 Jan 2022) - [CVE-2020-4427: IBM Data Risk Manager Security Bypass Vulnerability](https://junglewise.ai/threats/cve-2020-4427-ibm-data-risk-manager-security-bypass-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2019-4716: IBM Planning Analytics Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-4716-ibm-planning-analytics-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2020-4428: IBM Data Risk Manager Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-4428-ibm-data-risk-manager-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.1, published 3 Nov 2021) - [CVE-2013-3993: IBM InfoSphere BigInsights Invalid Input Vulnerability](https://junglewise.ai/threats/cve-2013-3993-ibm-infosphere-biginsights-invalid-input-vulnerability) (critical, exploited in the wild, CVSS 6.5, published 25 May 2022) - [CVE-2020-4430: IBM Data Risk Manager Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2020-4430-ibm-data-risk-manager-directory-traversal-vulnerability) (critical, exploited in the wild, CVSS 4.3, published 3 Nov 2021) - [CVE-2026-10561: IBM Langflow OSS remote code execution in PythonREPLComponent](https://junglewise.ai/threats/cve-2026-10561-ibm-langflow-oss-remote-code-execution-in-pythonreplcomponent) (critical, CVSS 10, published 22 Jun 2026) ## Vulnerabilities per week 469 vulnerabilities in the last four weeks, up 34% on the four before (350). 72 critical against 45, 1 exploited in the wild against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 157 | 33 | 0 | | 24 Aug 2026 | 16 | 4 | 0 | | 31 Aug 2026 | 70 | 2 | 0 | | 7 Sep 2026 | 51 | 8 | 0 | | 14 Sep 2026 | 168 | 20 | 0 | | 21 Sep 2026 | 96 | 12 | 0 | | 28 Sep 2026 | 6 | 1 | 0 | | 5 Oct 2026 | 80 | 12 | 0 | | 12 Oct 2026 | 85 | 9 | 0 | | 19 Oct 2026 | 43 | 2 | 0 | | 26 Oct 2026 | 32 | 6 | 0 | | 2 Nov 2026 | 309 | 55 | 1 | | 9 Nov 2026 | 0 | 0 | 0 | ## IBM technologies - [IBM API Connect](https://junglewise.ai/threats/technologies/api-connect): 207 vulnerabilities - [IBM AIX](https://junglewise.ai/threats/technologies/aix): 181 vulnerabilities - [IBM Langflow](https://junglewise.ai/threats/technologies/langflow-oss): 154 vulnerabilities - [IBM i](https://junglewise.ai/threats/technologies/i): 120 vulnerabilities - [IBM Guardium Data Protection](https://junglewise.ai/threats/technologies/guardium-data-protection): 93 vulnerabilities - [IBM PowerVM VIOS](https://junglewise.ai/threats/technologies/powervm-vios): 73 vulnerabilities - [IBM Vios](https://junglewise.ai/threats/technologies/vios): 72 vulnerabilities - [IBM WebSphere Application Server](https://junglewise.ai/threats/technologies/websphere-application-server): 67 vulnerabilities - [IBM WebSphere Application Server Liberty](https://junglewise.ai/threats/technologies/websphere-application-server-liberty): 56 vulnerabilities - [IBM Verify Identity Access](https://junglewise.ai/threats/technologies/verify-identity-access): 50 vulnerabilities - [IBM Datastage On Cloud Pak For Data](https://junglewise.ai/threats/technologies/datastage-on-cloud-pak-for-data): 48 vulnerabilities - [IBM Mq](https://junglewise.ai/threats/technologies/mq): 46 vulnerabilities - [IBM Financial Transaction Manager](https://junglewise.ai/threats/technologies/financial-transaction-manager): 45 vulnerabilities - [IBM Concert](https://junglewise.ai/threats/technologies/concert): 41 vulnerabilities - [IBM Security Verify Access](https://junglewise.ai/threats/technologies/security-verify-access): 41 vulnerabilities - [IBM Verify Identity Access Container](https://junglewise.ai/threats/technologies/verify-identity-access-container): 41 vulnerabilities - [IBM Security Verify Access Container](https://junglewise.ai/threats/technologies/security-verify-access-container): 36 vulnerabilities - [IBM Db2](https://junglewise.ai/threats/technologies/db2): 28 vulnerabilities - [IBM App Connect Enterprise](https://junglewise.ai/threats/technologies/app-connect-enterprise): 24 vulnerabilities - [IBM Db2 Mirror For I](https://junglewise.ai/threats/technologies/db2-mirror-for-i): 24 vulnerabilities - [IBM DataStage](https://junglewise.ai/threats/technologies/datastage): 19 vulnerabilities - [IBM Sterling File Gateway](https://junglewise.ai/threats/technologies/sterling-file-gateway): 19 vulnerabilities - [IBM Sterling B2B Integrator](https://junglewise.ai/threats/technologies/sterling-b2b-integrator): 17 vulnerabilities - [IBM Power Systems Firmware](https://junglewise.ai/threats/technologies/power-systems-firmware): 14 vulnerabilities - [IBM Cloud Pak For Business Automation](https://junglewise.ai/threats/technologies/cloud-pak-for-business-automation): 11 vulnerabilities - [IBM PowerVM Hypervisor](https://junglewise.ai/threats/technologies/powervm-hypervisor): 11 vulnerabilities - [IBM Aspera Faspex](https://junglewise.ai/threats/technologies/aspera-faspex): 10 vulnerabilities - [IBM Db2 Genius Hub](https://junglewise.ai/threats/technologies/db2-genius-hub): 10 vulnerabilities - [IBM Integration Bus for z/OS](https://junglewise.ai/threats/technologies/integration-bus-for-z-os): 10 vulnerabilities - [IBM Planning Analytics](https://junglewise.ai/threats/technologies/planning-analytics): 10 vulnerabilities - [IBM Watsonx.data Intelligence](https://junglewise.ai/threats/technologies/watsonx-data-intelligence): 10 vulnerabilities - [IBM I 7.3](https://junglewise.ai/threats/technologies/i-7-3): 9 vulnerabilities - [IBM I 7.4](https://junglewise.ai/threats/technologies/i-7-4): 9 vulnerabilities - [IBM I 7.5](https://junglewise.ai/threats/technologies/i-7-5): 9 vulnerabilities - [IBM I 7.6](https://junglewise.ai/threats/technologies/i-7-6): 9 vulnerabilities - [IBM Common Licensing Agent](https://junglewise.ai/threats/technologies/common-licensing-agent): 8 vulnerabilities - [IBM ContextForge MCP Gateway](https://junglewise.ai/threats/technologies/contextforge-mcp-gateway): 8 vulnerabilities - [IBM i Access Client Solutions](https://junglewise.ai/threats/technologies/i-access-client-solutions): 8 vulnerabilities - [IBM Langflow-Desktop](https://junglewise.ai/threats/technologies/langflow-desktop): 8 vulnerabilities - [IBM Cognos Analytics](https://junglewise.ai/threats/technologies/cognos-analytics): 7 vulnerabilities - [IBM Db2 Connect Server](https://junglewise.ai/threats/technologies/db2-connect-server): 7 vulnerabilities - [IBM License Key Server Administration and Reporting Tool](https://junglewise.ai/threats/technologies/license-key-server-administration-and-reporting-tool): 7 vulnerabilities - [IBM Aspera Enterprise WebApps](https://junglewise.ai/threats/technologies/aspera-enterprise-webapps): 6 vulnerabilities - [IBM Aspera Shares](https://junglewise.ai/threats/technologies/aspera-shares): 6 vulnerabilities - [IBM Cloud Pak for Data System](https://junglewise.ai/threats/technologies/cloud-pak-for-data-system): 6 vulnerabilities - [IBM MQ for HPE NonStop](https://junglewise.ai/threats/technologies/mq-for-hpe-nonstop): 6 vulnerabilities - [IBM QRadar SIEM](https://junglewise.ai/threats/technologies/qradar-siem): 6 vulnerabilities - [IBM TRIRIGA Application Platform](https://junglewise.ai/threats/technologies/tririga-application-platform): 6 vulnerabilities - [IBM Aspera High-Speed Transfer Server](https://junglewise.ai/threats/technologies/aspera-high-speed-transfer-server): 5 vulnerabilities - [IBM Business Automation Workflow](https://junglewise.ai/threats/technologies/business-automation-workflow): 5 vulnerabilities - [IBM Cloud Pak System](https://junglewise.ai/threats/technologies/cloud-pak-system): 5 vulnerabilities - [IBM Contextforge](https://junglewise.ai/threats/technologies/contextforge): 5 vulnerabilities - [IBM DataPower Gateway](https://junglewise.ai/threats/technologies/datapower-gateway): 5 vulnerabilities - [IBM Db2 for Linux, UNIX and Windows](https://junglewise.ai/threats/technologies/db2-for-linux-unix-and-windows): 5 vulnerabilities - [IBM Docling](https://junglewise.ai/threats/technologies/docling): 5 vulnerabilities - [IBM Maximo AI Service](https://junglewise.ai/threats/technologies/maximo-ai-service): 5 vulnerabilities - [IBM Netezza Performance Server](https://junglewise.ai/threats/technologies/netezza-performance-server): 5 vulnerabilities - [IBM Netezza Software](https://junglewise.ai/threats/technologies/netezza-software): 5 vulnerabilities - [IBM Qiskit-Sdk](https://junglewise.ai/threats/technologies/qiskit-sdk): 5 vulnerabilities - [IBM Watson Speech Services Cartridge](https://junglewise.ai/threats/technologies/watson-speech-services-cartridge): 5 vulnerabilities - [IBM webMethods Integration Server](https://junglewise.ai/threats/technologies/webmethods-integration-server): 5 vulnerabilities - [IBM WebSphere Extreme Scale](https://junglewise.ai/threats/technologies/websphere-extreme-scale): 5 vulnerabilities - [IBM Aspera High-Speed Transfer Endpoint](https://junglewise.ai/threats/technologies/aspera-high-speed-transfer-endpoint): 4 vulnerabilities - [IBM Aspera Orchestrator](https://junglewise.ai/threats/technologies/aspera-orchestrator): 4 vulnerabilities - [IBM Engineering AI Hub](https://junglewise.ai/threats/technologies/engineering-ai-hub): 4 vulnerabilities - [IBM Engineering Lifecycle Management - Jazz Foundation](https://junglewise.ai/threats/technologies/engineering-lifecycle-management-jazz-foundation): 4 vulnerabilities - [IBM Enterprise Build of Quarkus](https://junglewise.ai/threats/technologies/enterprise-build-of-quarkus): 4 vulnerabilities - [IBM Controller](https://junglewise.ai/threats/technologies/ibm-controller): 4 vulnerabilities - [IBM Informix Dynamic Server](https://junglewise.ai/threats/technologies/informix-dynamic-server): 4 vulnerabilities - [IBM InfoSphere Information Server](https://junglewise.ai/threats/technologies/infosphere-information-server): 4 vulnerabilities - [IBM Maximo Application Suite - Location Service for Esri Component](https://junglewise.ai/threats/technologies/maximo-application-suite-location-service-for-esri-component): 4 vulnerabilities - [IBM Planning Analytics Local](https://junglewise.ai/threats/technologies/planning-analytics-local): 4 vulnerabilities - [IBM Process Mining](https://junglewise.ai/threats/technologies/process-mining): 4 vulnerabilities - [IBM Security Verify Directory](https://junglewise.ai/threats/technologies/security-verify-directory): 4 vulnerabilities - [IBM Storage TS4500 Library](https://junglewise.ai/threats/technologies/storage-ts4500-library): 4 vulnerabilities - [IBM UrbanCode Deploy](https://junglewise.ai/threats/technologies/urbancode-deploy): 4 vulnerabilities - [IBM Watsonx.data](https://junglewise.ai/threats/technologies/watsonx-data): 4 vulnerabilities - [IBM Cloud Pak For Data](https://junglewise.ai/threats/technologies/cloud-pak-for-data): 3 vulnerabilities - [IBM Cognos Controller](https://junglewise.ai/threats/technologies/cognos-controller): 3 vulnerabilities - [IBM Data Risk Manager](https://junglewise.ai/threats/technologies/data-risk-manager): 3 vulnerabilities - [IBM Datacap](https://junglewise.ai/threats/technologies/datacap): 3 vulnerabilities - [IBM Datacap Navigator](https://junglewise.ai/threats/technologies/datacap-navigator): 3 vulnerabilities - [IBM Db2 on Cloud Pak for Data](https://junglewise.ai/threats/technologies/db2-on-cloud-pak-for-data): 3 vulnerabilities - [IBM Db2 Warehouse on Cloud Pak for Data](https://junglewise.ai/threats/technologies/db2-warehouse-on-cloud-pak-for-data): 3 vulnerabilities - [IBM DevOps Plan](https://junglewise.ai/threats/technologies/devops-plan): 3 vulnerabilities - [IBM Ds8900f](https://junglewise.ai/threats/technologies/ds8900f): 3 vulnerabilities - [IBM Ds8900f Firmware](https://junglewise.ai/threats/technologies/ds8900f-firmware): 3 vulnerabilities - [IBM Ds8a00](https://junglewise.ai/threats/technologies/ds8a00): 3 vulnerabilities - [IBM Ds8a00 Firmware](https://junglewise.ai/threats/technologies/ds8a00-firmware): 3 vulnerabilities - [IBM PowerVM NovaLink](https://junglewise.ai/threats/technologies/novalink): 3 vulnerabilities - [IBM OpenBMC FW1110](https://junglewise.ai/threats/technologies/openbmc-fw1110): 3 vulnerabilities - [IBM Operations Analytics - Log Analysis](https://junglewise.ai/threats/technologies/operations-analytics-log-analysis): 3 vulnerabilities - [IBM Power Hardware Management Console](https://junglewise.ai/threats/technologies/power-hardware-management-console): 3 vulnerabilities - [IBM Power System E1050](https://junglewise.ai/threats/technologies/power-system-e1050): 3 vulnerabilities - [IBM Power System L1022](https://junglewise.ai/threats/technologies/power-system-l1022): 3 vulnerabilities - [IBM Power System L1024](https://junglewise.ai/threats/technologies/power-system-l1024): 3 vulnerabilities - [IBM Power System S1012](https://junglewise.ai/threats/technologies/power-system-s1012): 3 vulnerabilities - [IBM Power System S1014](https://junglewise.ai/threats/technologies/power-system-s1014): 3 vulnerabilities - [IBM Power System S1022](https://junglewise.ai/threats/technologies/power-system-s1022): 3 vulnerabilities - [IBM Power System S1022s](https://junglewise.ai/threats/technologies/power-system-s1022s): 3 vulnerabilities - [IBM Power System S1024](https://junglewise.ai/threats/technologies/power-system-s1024): 3 vulnerabilities - [IBM Storage Scale](https://junglewise.ai/threats/technologies/storage-scale): 3 vulnerabilities - [IBM Turbonomic kubeturbo agent](https://junglewise.ai/threats/technologies/turbonomic-kubeturbo-agent): 3 vulnerabilities - [IBM Verify Directory](https://junglewise.ai/threats/technologies/verify-directory): 3 vulnerabilities - [IBM watsonx Orchestrate Cartridge for Cloud Pak for Data](https://junglewise.ai/threats/technologies/watsonx-orchestrate-cartridge-for-cloud-pak-for-data): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "IBM vulnerabilities", https://junglewise.ai/threats/vendors/ibm, 13 November 2026.