IBM Support

Release of WinCollect Agent v10.1.16 (standalone)

Release Notes


Abstract

This release note contains upgrade instructions and new features in IBM® WinCollect Agent v10.1.16.

Content

Quick links 

 
About WinCollect v10.1.16 

WinCollect v10.1.16 is available for standalone only deployments. 

Important: Starting with v10.1.4, WinCollect now uses a virtual account to increase application security. If you are upgrading from v10.1.3 or earlier versions, refer to the v10.1.4 release notes for upgrade instructions. 
 

Bug fixes and improvements

This release includes several big fixes and improvement including the following known issues: 

  • When the Microsoft Windows EventViewer service unexpectedly crashes or is restarted, WinCollect 10 cannot reestablish the connection to the Event Viewer (Known issue: DT460091) 

  • WinCollect 10 intermittently misses Exchange logs, causing event loss in QRadar (Known issue: DT462423) 

  • WinCollect 10 Console Dashboard graph is not displayed correctly on different browsers (Known issue: DT444740) 

  • Event sending and transmission latency have been improved. 
     

Fixed security vulnerability details 

CVE-2026-22184 ,CVE-2026-27171, CVE-2026-3805, CVE-2025-14819, CVE-2025-13034, CVE-2025-15224, CVE-2025-14017, CVE-2026-1965, CVE-2025-15079, CVE-2025-14524, CVE-2025-14524, CVE-2026-3784,CVE-2026-3805, CVE-2025-14819, CVE-2025-13034, CVE-2025-15224, CVE-2025-14017, CVE-2026-1965, CVE-2025-15079, CVE-2025-14524, CVE-2025-14524, CVE-2026-3784, CVE-2026-7009, CVE-2026-6276, CVE-2026-7168, CVE-2026-6253, CVE-2026-6429 
 

Note: Additionally, this release includes the following CVE fixes: 

  • Zlib upgraded from v1.3.1 to Zlib v1.3.2

  • Curl upgraded from v8.17.0 to Curl v8.20.0)

  • UI vulnerabilities  CVE-2025-13465 and CVE-2026-33671 are fixed
       

Upgrading 

Upgrade your existing WinCollect 7 Agent (standalone) to WinCollect v10.1.16. For more infornation, see WinCollect 10 Upgrade instructions. 

For more information about the agent and new features, see the WinCollect 10 documentation.   
 

Supported Windows® operating systems 

  • Windows® Server 2025 (including Core) 
    Note: Forwarded events on Windows Server 2025 are affected by a known Microsoft issue. For more information see, known issue DT439241. 

  • Windows® Server 2022 (including Core) 

  • Windows® Server 2019 (including Core) 

  • Windows® Server 2016 (including Core) 

  • Windows® 10 (most recent) 

  • Windows® 11 (most recent) 

Note: WinCollect is not supported on versions of Windows® that moved to End Of Support by Microsoft®. After software is used beyond the Extended Support End Date, the product might still function as expected; however, IBM® does not make code or vulnerability fixes to resolve WinCollect issues for older operating systems. For more information, see the WinCollect 10 documentation. 

 

IBM® Statement for WinCollect supported versions 
Supported software versions for IBM® WinCollect are the latest version (n) and the latest minus one (n-1). Therefore, the two newest versions of WinCollect are the versions that QRadar® support suggests with any support tickets (cases) that are opened. To prevent issues, it is important that you, as an administrator, keep WinCollect deployments updated when new versions are posted to IBM® Fix Central. For questions related to this statement, ask in the WinCollect forum: http://ibm.biz/wincollectforums. 
  

Prerequisites for the WinCollect v10.1.16 upgrade

Installation prerequisites 

WinCollect v10.0.1 and WinCollect v7.3.0 or later agents that are in standalone mode can be upgraded to WinCollect v10.1.16. 

QRadar® version prerequisites 
WinCollect v10.1.16 supports QRadar® v7.5.0 or later. 

WinCollect version prerequisites 

WinCollect v7.3.0 standalone is the minimum version required to upgrade to QRadar® v10.x (any patch level). 


WinCollect upgrade procedure

For more information about installing or upgrading WinCollect 10, see WinCollect 10 Documentation. 

WinCollect Agent update links for 64-bit and 32-bit downloads: 

For more information about standalone mode, see WinCollect 10 Documentation. 

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtwAAA","label":"WinCollect"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.5.0"}]

Document Information

Modified date:
26 June 2026

UID

ibm17274971

Page Feedback