Canadian Cyber Centre flags flaws in several IBM products
Original title: IBM security advisory (AV26-1064)
Affected products include Concert through 3.0.0, MQ images and Operator, Connect:Direct, and IBM i 7.3–7.6; no CVEs are named.
The Canadian Centre for Cyber Security published advisory AV26-1064 on October 20, 2026, saying IBM products were affected as of October 19. Named products are IBM Concert, IBM MQ Advanced container images, IBM MQ Operator, IBM Sterling Connect:Direct for Unix, and IBM i. The centre tells users and administrators to review IBM’s link and apply updates as they become available. No CVE identifiers, severity ratings, or exploitation status are included.
Unconfirmed: The notice does not name CVEs, severity, fixed versions, or whether the flaws are exploited.
- Concert is affected at versions prior to or equal to 3.0.0.
- Connect:Direct for Unix is affected through 6.3.0.7 and through 6.4.0.6.
- IBM i versions 7.3, 7.4, 7.5, and 7.6 are listed.
- MQ Advanced container images and MQ Operator are listed as multiple versions.
| Product | Affected |
|---|---|
| IBM Concert | Prior to or equal to 3.0.0 |
| IBM MQ Advanced container images | Multiple versions |
| IBM MQ Operator | Multiples versions |
| IBM Sterling Connect Direct for Unix | Prior to or equal to 6.3.0.7; prior to or equal to 6.4.0.6 |
| IBM i | 7.3, 7.4, 7.5 and 7.6 |
- 1.Review IBM’s advisory link and apply updates as they become available.
- Vendors
- IBM
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1064 Date: October 20, 2026 As of October 19, 2026, IBM is affected by vulnerabilities in the following products: IBM Concert Prior to or equal to 3. 0. 0 IBM MQ Advanced container images Multiple versions IBM MQ Operator Multiples versions IBM Sterling Connect Direct for Unix Prior to or equal to 6.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.