30
IBM security advisory (AV26-862)
Canada's Cyber Centre relayed an IBM advisory disclosing vulnerabilities across SPSS, MQ, Maximo, Instana, Concert and other IBM products.
The Canadian Centre for Cyber Security (AV26-862) published an IBM security advisory dated August 31, 2026, noting vulnerabilities affecting multiple IBM products as of August 28, 2026. Affected products include SPSS Collaboration and Deployment Services, IBM MQ Agent, Maximo Application Suite Monitor Component, Observability with Instana agent, Financial Transaction Manager for Red Hat OpenShift, Engineering Test Management, Control Center, Concert Software and Tivoli System Automation. No CVE identifiers, CVSS scores or exploitation details are provided in the relayed text.
25
IBM security advisory (AV26-922)
Canadian Cyber Centre relays IBM advisory for Langflow, MQ, and Sterling File Gateway flaws including MQ remote code execution (CVE-2026-13293).
Canadian Cyber Centre advisory AV26-922 relays IBM fixes for Langflow OSS (versions through 1.11.5 across release lines), IBM MQ (10.0.0.0 and 9.x LTS/CD through 9.4.5.1), and Sterling File Gateway (through 6.2.2.1). CVE-2026-13293 is a remote code execution flaw in IBM MQ Java messaging caused by an incomplete security scanner blocklist enabling network-based code execution. CVE-2026-19290 is an improper access control vulnerability in IBM Sterling File Gateway. Administrators are urged to review and apply the necessary updates.
30
30
55
60
47