CyberSecBulletin

Ibi vulnerabilities

We track 2 vulnerabilities in Ibi products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest Ibi vulnerabilities

  • 8.6 High severity

    WebFOCUS: Improper Neutralization of CRLF Sequences

    CVE-2026-127036Ibi

    Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in ibi WebFOCUS. This issue affects WebFOCUS: 9.1, from 9.2 through 7, and from 9.3 through 7.

  • 9.3 Critical severity

    WebFOCUS: Improper Control of Generation of Code

    CVE-2025-11548Ibi

    A remote, unauthenticated privilege escalation in ibi WebFOCUS allows an attacker to gain administrative access to the application which may lead to unauthenticated Remote Code Execution