Changeflow GovPing Data Privacy & Cybersecurity Multiple IBM Product Vulnerabilities Allow Remo...
Priority review Guidance Added Final

Multiple IBM Product Vulnerabilities Allow Remote Code Execution

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR published advisory CERTFR-2026-AVI-0424 on April 10, 2026 disclosing multiple critical vulnerabilities in IBM products including QRadar AI Assistant, Sterling External Authentication Server, Sterling Secure Proxy, and WebSphere Application Server Liberty. Affected versions span QRadar AI Assistant prior to 1.4.0, Sterling products prior to 6.1.1.3 GA and 6.2.1.2 GA, and WebSphere Liberty 17.0.0.3 to 26.0.0.3 without APAR PH70510. The vulnerabilities expose systems to remote code execution, data confidentiality breaches, denial of service, and security policy bypass.

View original document View source feed page

What changed

CERT-FR published a security advisory identifying 16 CVEs affecting four IBM product families. The most severe vulnerabilities allow remote code execution, data confidentiality breaches, and denial of service attacks. Affected products include QRadar AI Assistant for QRadar SIEM, Sterling External Authentication Server, Sterling Secure Proxy, and WebSphere Application Server Liberty.

Organizations running affected IBM products face significant security risks and should immediately apply patches from IBM's security bulletins. The advisory references multiple CVEs spanning 2020-2026, including recently disclosed vulnerabilities. Security teams should inventory their IBM deployments, prioritize patching based on exposure, and monitor for indicators of compromise. CERT-FR recommends following the editor's guidance for patch acquisition.

What to do next

  1. Identify all deployments of affected IBM products (QRadar AI Assistant, Sterling External Authentication Server, Sterling Secure Proxy, WebSphere Application Server Liberty)
  2. Apply patches referenced in IBM security bulletins 7268602, 7268604, 7268649, 7268724, 7268725, and 7268726
  3. Update vulnerability management procedures to include monitoring for related CVEs including CVE-2025-12194, CVE-2026-21884, CVE-2026-21925, and CVE-2026-21933

Archived snapshot

Apr 10, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 10 avril 2026 N° CERTFR-2026-AVI-0424 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans les produits IBM

Gestion du document

| Référence | CERTFR-2026-AVI-0424 |
| Titre | Multiples vulnérabilités dans les produits IBM |
| Date de la première version | 10 avril 2026 |
| Date de la dernière version | 10 avril 2026 |
| Source(s) | Bulletin de sécurité IBM 7268602 du 06 avril 2026
Bulletin de sécurité IBM 7268604 du 06 avril 2026
Bulletin de sécurité IBM 7268649 du 06 avril 2026
Bulletin de sécurité IBM 7268724 du 07 avril 2026
Bulletin de sécurité IBM 7268725 du 07 avril 2026
Bulletin de sécurité IBM 7268726 du 07 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risques

  • Atteinte à l'intégrité des données
  • Atteinte à la confidentialité des données
  • Contournement de la politique de sécurité
  • Déni de service à distance
  • Exécution de code arbitraire à distance
  • Falsification de requêtes côté serveur (SSRF)
  • Injection de code indirecte à distance (XSS)
  • Injection de requêtes illégitimes par rebond (CSRF)
  • Non spécifié par l'éditeur

Systèmes affectés

  • QRadar AI Assistant pour QRadar SIEM versions antérieures à 1.4.0
  • Sterling External Authentication Server versions 6.1.1.x antérieures à 6.1.1.3 GA
  • Sterling Secure Proxy versions 6.1.0.x antérieures à 6.1.0.4 GA
  • Sterling Secure Proxy versions 6.2.1.x antérieures à 6.2.1.2 GA
  • WebSphere Application Server Liberty versions 17.0.0.3 à 26.0.0.3 sans le correctif APAR PH70510

Résumé

De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 10 avril 2026 Version initiale

Named provisions

Risques Systèmes affectés Résumé Solutions Documentation

Related changes

Favicon for www.cert.ssi.gouv.fr Multiple Microsoft Office Vulnerabilities Allow Remote Code Execution, Data Breach
Priority review Apr 15, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Vulnerabilities in SAP Products Allow Remote Code Execution
Priority review Apr 14, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Vulnerabilities in Tenable Security Center Allow Remote Code Execution
Priority review Apr 10, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
April 10th, 2026
Instrument
Guidance
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0424

Who this affects

Applies to
Technology companies Organizations using affected IBM products
Industry sector
5112 Software & Technology
Activity scope
Security vulnerability management Patch deployment Enterprise software maintenance
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy Software vulnerabilities

Browse Categories

Agriculture & Food Safety 65 AI Regulation 3 Banking & Finance 314 Consumer Protection 46 Courts & Legal 361 Data Privacy & Cybersecurity 76 Defense & National Security 51 Education 22 Energy 100 Environment 86 Environmental & Energy 11 Environmental Regulation 7 Financial Regulation 2 Government & Legislation 279 Government Operations 5 Healthcare 136 Healthcare & Life Sciences 5 Housing 16 Immigration 8 Immigration & Border Control 1 Insurance 58 Labor & Employment 114 Legal & Judicial 9 Pharma & Drug Safety 104 Public Health 2 Real Estate & Housing 3 Sanctions & Export Controls 1 Securities & Investments 8 Securities & Markets 103 Securities Regulation 6 Tax 65 Tax & Revenue 1 Telecom & Technology 47 Trade & Commerce 2 Trade & Sanctions 135 Transportation 60

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!