IBM InfoSphere Information Server Vulnerability Allows Security Bypass

CERT-Bund has published a security advisory (WID-SEC-2026-0867) concerning a critical vulnerability in IBM InfoSphere Information Server. This vulnerability, rated with a CVSS base score of 6.5 (medium), allows remote, anonymous attackers to bypass security mechanisms. The advisory indicates that the issue affects specific versions of the software running on Linux, UNIX, and Windows operating systems.

Organizations utilizing IBM InfoSphere Information Server, particularly those with versions prior to 11.7.1.6 DT458455, should review the advisory and implement available mitigations. While no specific compliance deadline is stated, prompt patching or mitigation is crucial to prevent unauthorized access and potential data breaches. The advisory highlights the need for continuous vulnerability management and timely software updates to maintain system security.