EN PT-BR
← Voltar ao feed
high exploit público

CERT-FR: Multiple vulnerabilities in IBM products (AIX, Cognos, QRadar, Sterling, Db2, WebSphere) allow RCE, SSRF, XSS and DoS

1 fonte(s) · 1 atualização(ões) · publicado 22/10/2026 21:00 · coletado há 5 dias

CERT-FR published advisory CERTFR-2026-AVI-1378 on 23 October 2026, covering multiple vulnerabilities in IBM products. According to the advisory, an attacker could exploit them to achieve remote arbitrary code execution, privilege escalation and remote denial of service. Other listed impacts include data integrity and confidentiality breaches, security policy bypass, server-side request forgery (SSRF) and indirect remote code injection (XSS). Affected products include AIX, VIOS, Cognos Analytics, Db2, several QRadar apps and plugins, Sterling B2B Integrator, Sterling File Gateway and WebSphere eXtreme Scale. The advisory does not report active exploitation and gives no CVSS scores.

Entenda a falha

A vulnerabilidade

CERT-FR advisory CERTFR-2026-AVI-1378 groups a very large set of CVEs (CVE-2016-1000240 to CVE-2026-82562; the list may be truncated) across IBM products. Impacts include remote arbitrary code execution, privilege escalation, remote denial of service, SSRF, XSS, security policy bypass and loss of data integrity or confidentiality. Affected: AIX 7.2 and 7.3 without ntp.rte fixes, AIX 7.3.4 without tmux.rte.3.5.1.1, VIOS 4.1 without ntp.rte.7.3, Cognos Analytics 12.0.x before 12.0.4 FP3 and 12.1.x before 12.1.3 FP2, Db2 1.2.x before 1.2.1, several QRadar apps and plugins, Sterling B2B Integrator and File Gateway 6.2.1.x before 6.2.1.3 and 6.2.2.x before 6.2.2.2, and WebSphere eXtreme Scale 8.6.x.x before 8.6.2.2 with PH73641 iFix. The advisory gives no per-CVE ranking, CVSS scores or attacker prerequisites.

Como funciona

The advisory does not describe how any individual flaw is triggered. It only lists impact classes: code execution, SSRF, XSS, DoS, policy bypass and integrity or confidentiality breaches. A defender can therefore not tell from it which input reaches which component, or at which step processing fails. The per-product details are in the IBM bulletins that CERT-FR references.

Por que é vulnerável

The articles do not state root causes for these CVEs. The advisory only mentions impact classes, and the vendor leaves some impacts unspecified. What the fixes change is also not described beyond the patched versions and fix packages (for example ntp.rte, tmux.rte and PH73641 iFix).

Como foi descoberta

CERT-FR published the advisory on 23 October 2026, based on IBM security bulletins 7292743, 7287209, 7292917, 7293039, 7293040, 7293161, 7293268, 7293282, 7293283, 7293351 and 7293764, dated 15 to 23 October 2026. The articles do not say who found the individual flaws or how they were reported. The advisory does not report active exploitation.

Explicação gerada por IA a partir da matéria e dos artigos, em 27/10/2026 13:22.

2 exploits públicos

Há código de exploração publicado no Exploit-DB para CVE-2023-44487, CVE-2020-11023. O código não é reproduzido aqui: o link leva à fonte, e a explicação foi escrita pela IA a partir do arquivo publicado.

  1. exploit-db.com · EDB-52426 ↗ · remoto · multiple · pub. 16/09/2025 não verificado

    HTTP/2 2.0 - Denial Of Service (DOS)

    This script targets the HTTP/2 Rapid Reset flaw (CVE-2023-44487) in any server that speaks HTTP/2, over the network and with no authentication. It opens a connection, sends a normal baseline of requests, then opens a batch of streams and cancels each one right away. It then measures the reset rate and server reaction to estimate risk. It is a basic exposure check, not a real attack tool: it uses one connection, a small default stream count and asks for confirmation, so it is unlikely to cause an actual outage.

    CVE-2023-44487 · autor: Madhusudhan Rajappa · explicação gerada por IA
  2. exploit-db.com · EDB-49767 ↗ · aplicação web · multiple · pub. 14/04/2021 não verificado

    jQuery 1.0.3 - Cross-Site Scripting (XSS)

    This file is a minimal proof of concept for a cross-site scripting flaw in how jQuery handles HTML strings. When a page passes untrusted markup, even sanitized markup, to jQuery DOM-insertion methods, certain malformed elements are rewritten so that script can run. It affects jQuery from 1.0.3 up to before 3.5.0, and the file does match CVE-2020-11023. The attacker needs no authentication but needs a page that feeds their content into such a method and a victim who loads it. The result is script execution in the victim's browser within the site's context. Maturity is low: two short proof-of-concept snippets that only demonstrate execution, not a weaponized exploit.

    CVE-2020-11023 · autor: Central InfoSec · explicação gerada por IA

Detalhes técnicos

  • Affected: AIX 7.2 without fix ntp.rte.7.2; AIX 7.3 without fix ntp.rte.7.3; AIX 7.3.4 without fix tmux.rte.3.5.1.1; VIOS 4.1 without fix ntp.rte.7.3.
  • Affected: Cognos Analytics 12.0.x before 12.0.4 FP3 and 12.1.x before 12.1.3 FP2; Db2 1.2.x before 1.2.1.
  • Affected QRadar components: App SDK before 2.2.8, Pulse App before 2.2.18, Use Case Manager App before 4.2.1, Log Management AQL Plugin 1.x.x before 1.1.11, SOAR QRadar Plugin App 5.x before 5.7.1.
  • Affected: Sterling B2B, Sterling B2B Integrator and Sterling File Gateway 6.2.1.x before 6.2.1.3 and 6.2.2.x before 6.2.2.2; WebSphere eXtreme Scale 8.6.x.x before 8.6.2.2 with security fix PH73641 iFix.
  • Impact classes: remote code execution, SSRF, XSS, remote DoS, security policy bypass, integrity and confidentiality breaches, and unspecified by the vendor.
  • The advisory references a large set of CVEs, from CVE-2016-1000240 to CVE-2026-82562. The source text is truncated, so the list may be incomplete.
  • Vendor bulletins: IBM 7292743, 7287209, 7292917, 7293039, 7293040, 7293161, 7293268, 7293282, 7293283, 7293351 and 7293764 (15 to 23 October 2026).

Remediação

  • Consult the IBM security bulletins listed above and apply the fixes and patched versions, as CERT-FR directs.

Linha do tempo

  1. cert.cyber.gouv.fr ↗ · pub. 22/10/2026 21:00 · coletado 27/10 13:01 primeiro registro

    CERT-FR: Multiple vulnerabilities in IBM products (AIX, Cognos, QRadar, Sterling, Db2, WebSphere) allow RCE, SSRF, XSS and DoS

    ler a análise desta fonte

    CERT-FR published advisory CERTFR-2026-AVI-1378 on 23 October 2026, covering multiple vulnerabilities in IBM products. According to the advisory, an attacker could exploit them to achieve remote arbitrary code execution, privilege escalation and remote denial of service. Other listed impacts include data integrity and confidentiality breaches, security policy bypass, server-side request forgery (SSRF) and indirect remote code injection (XSS). Affected products include AIX, VIOS, Cognos Analytics, Db2, several QRadar apps and plugins, Sterling B2B Integrator, Sterling File Gateway and WebSphere eXtreme Scale. The advisory does not report active exploitation and gives no CVSS scores.

    Technical Details

    • Affected: AIX 7.2 without fix ntp.rte.7.2; AIX 7.3 without fix ntp.rte.7.3; AIX 7.3.4 without fix tmux.rte.3.5.1.1; VIOS 4.1 without fix ntp.rte.7.3.
    • Affected: Cognos Analytics 12.0.x before 12.0.4 FP3 and 12.1.x before 12.1.3 FP2; Db2 1.2.x before 1.2.1.
    • Affected QRadar components: App SDK before 2.2.8, Pulse App before 2.2.18, Use Case Manager App before 4.2.1, Log Management AQL Plugin 1.x.x before 1.1.11, SOAR QRadar Plugin App 5.x before 5.7.1.
    • Affected: Sterling B2B, Sterling B2B Integrator and Sterling File Gateway 6.2.1.x before 6.2.1.3 and 6.2.2.x before 6.2.2.2; WebSphere eXtreme Scale 8.6.x.x before 8.6.2.2 with security fix PH73641 iFix.
    • Impact classes: remote code execution, SSRF, XSS, remote DoS, security policy bypass, integrity and confidentiality breaches, and unspecified by the vendor.
    • The advisory references a large set of CVEs, from CVE-2016-1000240 to CVE-2026-82562. The source text is truncated, so the list may be incomplete.
    • Vendor bulletins: IBM 7292743, 7287209, 7292917, 7293039, 7293040, 7293161, 7293268, 7293282, 7293283, 7293351 and 7293764 (15 to 23 October 2026).

    Remediation

    • Consult the IBM security bulletins listed above and apply the fixes and patched versions, as CERT-FR directs.