IBM security advisory (AV26-922)
Canadian Cyber Centre relays IBM advisory for Langflow, MQ, and Sterling File Gateway flaws including MQ remote code execution (CVE-2026-13293).
Canadian Cyber Centre advisory AV26-922 relays IBM fixes for Langflow OSS (versions through 1.11.5 across release lines), IBM MQ (10.0.0.0 and 9.x LTS/CD through 9.4.5.1), and Sterling File Gateway (through 6.2.2.1). CVE-2026-13293 is a remote code execution flaw in IBM MQ Java messaging caused by an incomplete security scanner blocklist enabling network-based code execution. CVE-2026-19290 is an improper access control vulnerability in IBM Sterling File Gateway. Administrators are urged to review and apply the necessary updates.
- Langflow OSS, IBM MQ, and Sterling File Gateway affected across listed versions
- CVE-2026-13293: IBM MQ Java messaging RCE via incomplete security scanner blocklist
- CVE-2026-19290: IBM Sterling File Gateway improper access control
- Users and administrators urged to apply IBM updates
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-13293 | Authenticated Remote Code Execution via Deserialization in IBM MQ | 8.8 | — | ||
| CVE-2026-19290 | Unauthenticated Information Disclosure in IBM Sterling File Gateway 6.2.x | 7.5 | — |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-922 Date: September 15, 2026 As of September 14, 2026, IBM is affected by vulnerabilities in the following products: Langflow OSS Prior to or equal to 1. 10. 0 Prior to or equal to 1.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.