IBM Spectrum Protect Plus Denial of Service Vulnerability - CVSS 8.6

CERT-Bund published advisory WID-SEC-2026-1148 disclosing a high-severity denial of service vulnerability in IBM Spectrum Protect Plus. The vulnerability affects all versions prior to 10.1.18 across Linux, UNIX, and Windows platforms and can be exploited remotely by an unauthenticated attacker. A mitigation is available and organizations are advised to apply patches or compensating controls.

Organizations running IBM Spectrum Protect Plus instances should prioritize patching to version 10.1.18 or later, or implement the vendor-recommended mitigations. IT security teams should review network exposure of affected deployments and monitor for exploitation attempts. Federal and public-sector entities in Germany using this software should treat this advisory as requiring immediate technical attention.