IBM Watson Speech Services Cartridge flaws allow code execution and service crashes

Summary

Several flaws in IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 let a remote attacker crash the service or run code. Users of those versions are affected.

What to do

Update to 5.4.0 Patch 8 or newer. No workaround is listed.

Products and platforms

• Linux
• IBM Watson Speech Services Cartridge

CVE IDs

• CVE-2026-17493 (opens in a new tab)
• CVE-2026-82418 (opens in a new tab)
• CVE-2026-19319 (opens in a new tab)
• CVE-2026-16725 (opens in a new tab)

Sources

• Advisory: ibm.com (opens in a new tab) · ibm.com (opens in a new tab) · ibm.com (opens in a new tab) · ibm.com (opens in a new tab)
• CVE record: cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab)

Times

First published 2026-11-04 21:03 UTC

First seen 2026-11-09 16:00 UTC