EN PT-BR
← Voltar ao feed
high

CERT-FR: Multiple vulnerabilities in IBM products (QRadar, Sterling B2B Integrator, Db2 extensions) allow RCE, DoS and SSRF

1 fonte(s) · 1 atualização(ões) · publicado 29/10/2026 21:00 · coletado há 1 hora

The French CERT-FR published advisory CERTFR-2026-AVI-1433 on 30 October 2026 about multiple vulnerabilities in IBM products. According to the advisory, some of the flaws allow an attacker to achieve remote arbitrary code execution, remote denial of service, data confidentiality compromise, security policy bypass and server-side request forgery (SSRF). The affected products include QRadar SIEM, QRadar SOAR, QRadar Hub, Sterling B2B Integrator, Sterling File Gateway, Db2 Bridge and Db2 Developer Extension. The advisory does not mention exploitation in the wild.

Entenda a falha

A vulnerabilidade

CERT-FR advisory CERTFR-2026-AVI-1433 groups more than 60 CVEs across IBM products, including the older CVE-2022-24785 and CVE-2024-33663. Impacts named are remote arbitrary code execution, remote denial of service, confidentiality breach, security policy bypass, SSRF and unspecified effects. It gives no CVSS scores, no per-CVE details and no attacker prerequisites. Affected: Db2 Bridge before 1.1.5.3, Db2 Developer Extension before 1.2.1, QRadar Hub before 3.9.2, QRadar SIEM before 7.6.0.6, QRadar SOAR before 51.0.11.2, and Sterling B2B Integrator and Sterling File Gateway 6.2.1.x before 6.2.1.3 and 6.2.2.x before 6.2.2.2. The fixed versions are the ones above, per the IBM bulletins.

Como foi descoberta

CERT-FR published the advisory on 30 October 2026, compiling about 20 IBM security bulletins released between 23 and 28 October 2026 (for example 7293670, 7293813 and 7294579). The articles do not say who found the flaws or how. The advisory does not mention exploitation in the wild.

Explicação gerada por IA a partir da matéria e dos artigos, em 02/11/2026 12:22.

Detalhes técnicos

  • Affected versions: Db2 Bridge before 1.1.5.3; Db2 Developer Extension before 1.2.1; QRadar Hub before 3.9.2; QRadar SIEM before 7.6.0.6; QRadar SOAR before 51.0.11.2; Sterling B2B Integrator and Sterling File Gateway 6.2.1.x before 6.2.1.3 and 6.2.2.x before 6.2.2.2.
  • Impact classes: remote code execution, remote denial of service, confidentiality breach, security policy bypass, SSRF and unspecified impacts.
  • The advisory references more than 60 CVEs, including the older CVE-2022-24785 and CVE-2024-33663, and about 20 IBM security bulletins published between 23 and 28 October 2026. It gives no CVSS scores or per-CVE details.

Remediação

  • Apply the fixed versions listed in the IBM security bulletins (for example 7293670, 7293813, 7294579) referenced in the advisory.

Linha do tempo

  1. cert.cyber.gouv.fr ↗ · pub. 29/10/2026 21:00 · coletado 02/11 12:01 primeiro registro

    CERT-FR: Multiple vulnerabilities in IBM products (QRadar, Sterling B2B Integrator, Db2 extensions) allow RCE, DoS and SSRF

    ler a análise desta fonte

    The French CERT-FR published advisory CERTFR-2026-AVI-1433 on 30 October 2026 about multiple vulnerabilities in IBM products. According to the advisory, some of the flaws allow an attacker to achieve remote arbitrary code execution, remote denial of service, data confidentiality compromise, security policy bypass and server-side request forgery (SSRF). The affected products include QRadar SIEM, QRadar SOAR, QRadar Hub, Sterling B2B Integrator, Sterling File Gateway, Db2 Bridge and Db2 Developer Extension. The advisory does not mention exploitation in the wild.

    Technical Details

    • Affected versions: Db2 Bridge before 1.1.5.3; Db2 Developer Extension before 1.2.1; QRadar Hub before 3.9.2; QRadar SIEM before 7.6.0.6; QRadar SOAR before 51.0.11.2; Sterling B2B Integrator and Sterling File Gateway 6.2.1.x before 6.2.1.3 and 6.2.2.x before 6.2.2.2.
    • Impact classes: remote code execution, remote denial of service, confidentiality breach, security policy bypass, SSRF and unspecified impacts.
    • The advisory references more than 60 CVEs, including the older CVE-2022-24785 and CVE-2024-33663, and about 20 IBM security bulletins published between 23 and 28 October 2026. It gives no CVSS scores or per-CVE details.

    Remediation

    • Apply the fixed versions listed in the IBM security bulletins (for example 7293670, 7293813, 7294579) referenced in the advisory.