IBM SPSS Multiple Vulnerabilities Advisory

CERT-Bund has released advisory WID-SEC-2026-0752 concerning critical vulnerabilities in IBM SPSS versions prior to 9.0.0.0 IF002. The vulnerabilities, rated with a high CVSS Base Score of 8.2, enable remote attackers to conduct cross-site scripting (XSS) attacks, execute denial-of-service (DoS) attacks, and manipulate files. The advisory applies to Linux, UNIX, and Windows operating systems.

Organizations utilizing affected IBM SPSS versions should implement mitigation strategies as outlined by CERT-Bund and IBM to address these security risks. While a specific compliance deadline is not provided, prompt patching or applying vendor-recommended workarounds is crucial to prevent potential exploitation and data compromise. Failure to address these vulnerabilities could lead to significant operational disruption and security breaches.