CVEvulnerability
CVE-2026-9610
5.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-06-22
- Last modified
- 2026-06-26
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.3 LOW — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-425
Description
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directly requesting the URL, bypassing intended access controls.
Affected configurations
• ibm datacap 9.1.7
• ibm datacap 9.1.8
• ibm datacap 9.1.9
• ibm datacap navigator 9.1.7
• ibm datacap navigator 9.1.8
• ibm datacap navigator 9.1.9
Related
Weakness · CWE (1)
- CWE-425 Direct Request weakness
References
- https://www.ibm.com/support/pages/node/7276609 Vendor Advisory