IBM security advisory (AV26-502)

Serial number: AV26-502
Date: May 25, 2026

Between May 18 and 24, 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

  • API Connect – versions V10.0.8.0 to 10.0.8.8
  • Analyst Workflow – versions 2.0.0 to 3.0.0
  • Data Cataloging – versions 2.1.8 to 2.5.1
  • DevOps Test Performance – versions 11.0 to 11.0.6
  • IBM App Connect Enterprise Certified Containers Operands – multiple versions
  • IBM App Connect Enterprise – versions 12.0.1.0 to 12.0.12.25
  • IBM App Connect Enterprise – versions 13.0.1.0 to 13.0.7.1
  • IBM App Connect Operator – multiple versions
  • IBM App Connect for Manufacturing – versions 13.0.0.0 to 13.0.1.0
  • IBM Aspera High-Speed Transfer Endpoint – versions 3.7.4 to 4.4.7 Fix Pack 1
  • IBM Aspera High-Speed Transfer Server – versions 3.7.4 to 4.4.7 Fix Pack 1
  • IBM Cognos Analytics Mobile – versions 1.1.0 to 1.1.25
  • IBM Data Studio client – version 4.2.2
  • IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data – multiple versions
  • IBM DevOps Code ClearCase – version 11.0
  • IBM Fusion HCI – versions 2.10.0 to 2.12.1
  • IBM Fusion – versions 2.9.0 to 2.12.1
  • IBM Guardium Data Protection – versions 12.0, 12.1 and 12.2
  • IBM Library Support for Spring – versions 3.2 to 3.2.25
  • IBM Library Support for Spring – version 3.4 to 3.4.16
  • IBM MQ Agent – version v1.0.0
  • IBM Rational ClearCase – version 10.0.0
  • IBM Rational ClearCase – version 9.1
  • IBM SPSS Analytic Server – multiple versions
  • IBM Security Verify Access OIDC Provider – versions 22.09 to 26.03
  • IBM Sterling Transformation Extender – versions 11.0.1.1 and 11.0.2.0
  • IBM Storage Defender - Data Protect – versions 2.0.0 to 2.1.3
  • IBM Storage Defender - Resiliency Service – versions 2.0.0 to 2.1.3
  • IBM Watson Speech Services Cartridge – versions 4.0.0 to 5.3.1
  • IBM voice-gateway/media-relay – version 1.0.8.31
  • IBM voice-gateway/sip-orchestrator – version 1.0.8.25
  • IBM voice-gateway/sms-gateway – version 1.0.8.19
  • IBM voice-gateway/stt-adapter – version 1.0.8.20
  • IBM voice-gateway/tts-adapter – version 1.0.8.20
  • IBM watsonx Code Assistant On Prem – multiple versions
  • IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data – versions 4.8.4 to 4.8.5
  • IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data – versions 5.0.0 to 5.3.1
  • IBM watsonx Orchestrate Developer Edition – versions 1.4.0 to 2.9.0
  • Langflow OSS – versions 1.0.0 to 1.9.1
  • Rational Business Developer (RBD) – versions 9.6 to 9.6.1.1
  • Rational Business Developer (RBD) – versions 9.7 to 9.7.1
  • Rational Performance Tester – multiple versions
  • SPSS Collaboration and Deployment Services – multiple versions
  • z/Transaction Processing Facility – version 1.1

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

Date modified: