Threat database

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit unauthorized values, potentially resulting in unintended application behavior.

IBM webMethods Integration Server 11.1 is affected by an XML external entity (XXE) injection vulnerability, also known as Blind XPath Injection (CWE-91). This vulnerability allows a remote attacker with limited privileges to exploit XML processing to potentially expose sensitive information or cause resource exhaustion. The vulnerability has a high severity rating with a CVSS score of 7.8.

IBM Common Licensing versions 9.0, 9.0.0.1, 9.0.0.2, and ART 9.0 series contain a vulnerability that allows remote attackers to redirect users to arbitrary domains. This occurs due to improper validation of the HTTP Host header, which can be exploited without authentication or user interaction. The vulnerability has a high CVSS score of 9.1, indicating critical severity with high impact on confidentiality and integrity but no impact on availability.

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization.

CVE-2026-75777 is a high-severity vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.5. It involves improper privilege management that allows a local attacker to escape container protections by making unrestricted system calls within the container.

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the dangerous callable blocklist due to the logic error. If the crafted component reached the runtime execution path, the attacker could cause arbitrary operating system commands to execute on the server in-process, with the privileges of the running service.

IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner.

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval() call on attacker-controlled input.

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.7 contain a critical vulnerability due to the use of default credentials. This flaw could allow a remote attacker to gain administrative access without authentication. The vulnerability is identified as CWE-1392 and has a CVSS v3.1 score of 9.8, indicating a high severity with full confidentiality, integrity, and availability impact.

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of command-line arguments in the MCP stdio server configuration.

IBM Langflow OSS versions 1.0.0 through 1.11.5 contain a server-side request forgery (SSRF) vulnerability that allows a remote authenticated attacker to obtain sensitive information by exploiting improper validation of user-controlled API endpoints. The vulnerability has a medium severity with a CVSS score of 5. No official patch or remediation details are provided in the available data.

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command.

IBM Langflow OSS versions 1.0.0 through 1.11.5 contain an improper access control vulnerability that allows a remote authenticated attacker to read arbitrary files. This vulnerability is identified as CWE-284 and has a medium severity with a CVSS score of 6.5. The flaw could lead to unauthorized disclosure of sensitive information but does not impact integrity or availability.

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an incomplete environment variable blocklist.

CVE-2026-80378 is a high-severity vulnerability in IBM DataStage on Cloud Pak for Data version 5.4.0.0. It involves improper authorization that could allow a remote authenticated attacker to cause a denial of service. The vulnerability does not impact confidentiality but can affect integrity and availability.

CVE-2026-80380 is a high-severity cross-site request forgery (CSRF) vulnerability in IBM DataStage on Cloud Pak for Data version 5.4.0.0. This flaw could allow a remote attacker to perform unauthorized actions by tricking an authenticated user into submitting a forged request. The vulnerability impacts the integrity of the system but does not affect confidentiality. No known exploits are reported in the wild, and no official patch or remediation details are provided in the available data.

IBM DataStage on Cloud Pak for Data version 5.4.0.0 contains an authorization bypass vulnerability (CWE-639) that allows a remote authenticated attacker to manipulate runtime caches, potentially causing denial of service. The vulnerability arises from insecure direct object references. It has a high severity with a CVSS score of 7.4. No patch information is currently provided.

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to path traversal during archive extraction.

IBM DataStage on Cloud Pak for Data version 5.4.0.0 contains an improper authorization vulnerability that allows a remote authenticated attacker to delete arbitrary RabbitMQ queues or exchanges, resulting in denial of service. This vulnerability is identified as CWE-285 and has a high severity with a CVSS score of 8.5.

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction.