news.mlab.sh
Back to the feed
vulnerability

Multiples vulnérabilités dans les produits IBM (11 septembre 2026)

Sep 11, 2026 · CERT-FR
CriticalCVSS 9.8
Summary

Multiple vulnerabilities have been discovered in IBM products, including remote code execution, privilege escalation, and denial-of-service attacks. Several of these vulnerabilities can be exploited to allow an attacker to execute arbitrary code, elevate privileges, and cause a denial-of-service. The vulnerabilities affect a wide range of IBM products, including Db2, Informix, QRadar, and Sterling. IBM has released security bulletins detailing the issues and providing guidance on remediation.

Multiple vulnerabilities have been discovered within a range of IBM products, requiring immediate attention and remediation. These vulnerabilities span several product lines, including Db2, Informix, QRadar, Sterling Partner Engagement Manager, and WebSphere Application Server Liberty. The issues range from remote code execution and privilege escalation to denial-of-service attacks and SSRF (Server-Side Request Forgery).

Specifically, vulnerabilities exist in versions of Db2 Bridge, Db2 Common Container, Db2 Developer Extension, Db2 on Cloud Pak for Data, Informix Dynamic Server, QRadar Hub, and Sterling Partner Engagement Manager. Many of these vulnerabilities allow an attacker to execute arbitrary code remotely, potentially gaining full control of affected systems. The vulnerabilities also include the ability to elevate privileges, allowing an attacker to bypass security controls and access sensitive data.

IBM has released security bulletins detailing the specific vulnerabilities and providing guidance on how to mitigate the risks. These bulletins include detailed information on affected versions, exploitation details, and recommended remediation steps. The security bulletins can be found at the following links:

  • IBM Security Bulletin 7286515: [https://www.ibm.com/support/pages/node/7286515](https://www.ibm.com/support/pages/node/7286515)
  • IBM Security Bulletin 7286516: [https://www.ibm.com/support/pages/node/7286516](https://www.ibm.com/support/pages/node/7286516)
  • IBM Security Bulletin 7286775: [https://www.ibm.com/support/pages/node/7286775](https://www.ibm.com/support/pages/node/7286775)
  • IBM Security Bulletin 7286776: [https://www.ibm.com/support/pages/node/7286776](https://www.ibm.com/support/pages/node/7286776)
  • IBM Security Bulletin 7286777: [https://www.ibm.com/support/pages/node/7286777](https://www.ibm.com/support/pages/node/7286777)
  • IBM Security Bulletin 7286646: [https://www.ibm.com/support/pages/node/7286646](https://www.ibm.com/support/pages/node/7286646)
  • IBM Security Bulletin 7286976: [https://www.ibm.com/support/pages/node/7286976](https://www.ibm.com/support/pages/node/7286976)
  • IBM Security Bulletin 7286982: [https://www.ibm.com/support/pages/node/7286982](https://www.ibm.com/support/pages/node/7286982)
  • IBM Security Bulletin 7286986: [https://www.ibm.com/support/pages/node/7286986](https://www.ibm.com/support/pages/node/7286986)
  • IBM Security Bulletin 7286987: [https://www.ibm.com/support/pages/node/7286987](https://www.ibm.com/support/pages/node/7286987)
  • IBM Security Bulletin 7286990: [https://www.ibm.com/support/pages/node/7286990](https://www.ibm.com/support/pages/node/7286990)
  • IBM Security Bulletin 7286993: [https://www.ibm.com/support/pages/node/7286993](https://www.ibm.com/support/pages/node/7286993)
  • IBM Security Bulletin 7287136: [https://www.ibm.com/support/pages/node/7287136](https://www.ibm.com/support/pages/node/7287136)
  • CVE Details: The vulnerabilities are associated with the following CVE identifiers:
  • CVE-2010-5312
  • CVE-2011-4969
  • CVE-2012-6708
  • CVE-2014-125087
  • CVE-2014-3578
  • CVE-2015-5237
  • CVE-2015-9251
  • CVE-2016-10735
  • CVE-2016-4055
  • CVE-2016-6811
  • CVE-2016-7103
  • CVE-2017-18214
  • CVE-2017-7669
  • CVE-2018-1000632
  • CVE-2018-11087
  • CVE-2018-11760
  • CVE-2018-11793
  • CVE-2018-1199
  • CVE-2018-1259
  • CVE-2018-1273
  • CVE-2018-1274
  • CVE-2018-1313
  • CVE-2018-1330
  • CVE-2018-1334
  • CVE-2018-14040
  • CVE-2018-14041
  • CVE-2018-14042
  • CVE-2019-0204
  • CVE-2019-0231
  • CVE-2019-10099
  • CVE-2019-14893
  • CVE-2019-16869
  • CVE-2019-20444
  • CVE-2019-20445
  • CVE-2019-47304
  • CVE-2019-47310
  • CVE-2019-47311
  • CVE-2019-47321
  • CVE-2019-47338
  • CVE-2019-47352
  • CVE-2019-47353
  • CVE-2019-47356
  • CVE-2021-21290
  • CVE-2021-21295
  • CVE-2021-21409
  • CVE-2021-23337
  • CVE-2021-23369
  • CVE-2021-41182
  • CVE-2021-41183
  • CVE-2021-41184
  • CVE-2021-41973
  • CVE-2021-46909
  • CVE-2021-46939
  • CVE-2021-46972
  • CVE-2021-47097
  • CVE-2021-47097
  • CVE-2021-47101
  • CVE-2021-47236
  • CVE-2021-47257
  • CVE-2021-47284
  • CVE-2021-47287
  • CVE-2021-47287
  • CVE-2021-47304
  • CVE-2021-47310
  • CVE-2021-47311
  • CVE-2021-47321
  • CVE-2021-47338
  • CVE-2021-47352
  • CVE-2021-47353
  • CVE-2021-47356
Read the full article at CERT-FR