CyberSecBulletin

IBM vulnerabilities

We track 1,482 vulnerabilities in IBM products across 60+ products. 1,480 are rated high or critical, and 12 have been exploited in real attacks. The most recent was published on November 13, 2026.

1,482vulnerabilities
348critical
1,132high
12exploited
8.3average CVSS score

Latest IBM vulnerabilities

  • 9.8 Critical severity

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Exploited

    CVE-2014-6271GNUEPSS 100%

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature

  • 3.5 Low severity

    IBM InfoSphere BigInsights Invalid Input Exploited

    CVE-2013-3993IBMEPSS 4.77%

    IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.