Our takeIBM released two bundles of fixes (AV26-943 and AV26-997) covering flaws in MQ, Guardium, CICS TX, Sterling File Gateway, DataStage, and IBM i. Patch on your normal cycle if you run any of these; most smaller shops don't use them and can ignore this one.Cyber Resilience desk
What this means for you — Security leader:Review and apply the fixes from IBM Security Advisories AV26-943 and AV26-997 on your schedule. Affected products include multiple versions of IBM MQ, Guardium Data Protection 12.2, CICS TX Advanced 10.1, Sterling File Gateway ≤6.2.0.6_1/6.2.1.x, DataStage on Cloud Pak for Data 5.4.0.0, and IBM i 7.3–7.6.
What this means for you — Lean IT orgs:Check whether you run any of the listed IBM products (especially IBM MQ or Guardium Data Protection). If you do, apply the vendor updates; most lean teams that don't use these specific IBM tools can ignore this one.
What this means for you — MSP:Audit client environments for the affected IBM products in both advisories (MQ, Guardium 12.2, IBM i, Sterling File Gateway, DataStage on Cloud Pak). Prioritize patching and test post-update.
What this means for you — Researcher:Track these two IBM advisories (AV26-943 and AV26-997) for new CVEs, exploit details, or downstream impact on dependent software.