IBM
8 IBM flaws are on CISA's list of vulnerabilities attackers have used, 1 of them added in 2026. CISA says 2 are known to be used by ransomware. The latest was added Aug 4, 2026.
8on CISA's list, all time
1added in 2026
1in the last 90 days
2used by ransomware
1zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Data Risk Manager | 3 | Nov 3, 2021 |
| Langflow | 1 | Aug 4, 2026 |
| Aspera Faspex | 1 | Feb 21, 2023 |
| InfoSphere BigInsights | 1 | May 25, 2022 |
| WebSphere Application Server and Server Hypervisor Edition | 1 | Jan 10, 2022 |
| Planning Analytics | 1 | Nov 3, 2021 |
Latest IBM flaws
- LangflowIBM Langflow Code Injection Vulnerability
- Aspera FaspexIBM Aspera Faspex Code Execution Vulnerability
- InfoSphere BigInsightsIBM InfoSphere BigInsights Invalid Input Vulnerability
- WebSphere Application Server and Server Hypervisor EditionIBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
- Planning AnalyticsIBM Planning Analytics Remote Code Execution Vulnerability
- Data Risk ManagerIBM Data Risk Manager Security Bypass Vulnerability
- Data Risk ManagerIBM Data Risk Manager Remote Code Execution Vulnerability
- Data Risk ManagerIBM Data Risk Manager Directory Traversal Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.