France’s National Agency for the Security of Information Systems (ANSSI) reported multiple vulnerabilities in IBM products on 16 October 2026. Some could allow remote arbitrary code execution, privilege escalation or a remote denial of service.
The risks also include breaches of data confidentiality and integrity, security-policy bypass, and SSRF, XSS, CSRF and SQLi attacks.
Affected products include AIX 7.3.x without the latest security fix; Db2 Developer Extension versions before 1.2.1; Db2 intelligence center before 1.1.0; and Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data before v5.3.1 patch 15. The notice also lists QRadar SIEM, Security QRadar Log Management AQL Plugin and several Sterling products, with affected versions specified in the advisory.
