Summary
generated automatically from NVD dataCVE-2026-19622 affects IBM Planning Analytics 2.0 and 2.1. Improper validation of sub-requests lets a remote attacker bypass authentication and escalate privileges, a weakness classified as CWE-288. Successful exploitation could seriously compromise confidentiality, integrity and availability. The flaw is rated HIGH with a CVSS v3.1 score of 8.8, and it is exploitable over the network by a low-privileged user.
NVD description
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.
EPSS · FIRST.org
0.34%probability of exploitation in the next 30 days
Higher than 26% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v3.1 Score
Information
- Published
- 12 oct. 2026
- Updated
- 15 oct. 2026
- Status
- Analyzed
- Source
- psirt@us.ibm.com
Affected products
Weaknesses (CWE)
References (1)
- https://www.ibm.com/support/pages/node/7291604PatchVendor Advisory
Similar CVEs
Other vulnerabilities of type CWE-288
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.