CVE-2026-13477Medium· 4.7▾ SunlitIBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal user privileges on the system due to improper validation of user sup…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.
QRadar >= 7.6.0.0 <= 7.6.0.1QRadar >= 7.5.0 <= 7.5.0 UP 15 Interim Fix 005IBM strongly encourages customers to update their systems promptly.
ProductVersionFixIBM QRadar SIEM 7.5.0 7.5.0 UP15 IF05 https://www.ibm.com/support/pages/release-qradar-750-update-package-15-interim-fix-05-sfs-202161520260715231428 IBM QRadar SIEM 7.6.0 7.6.0.2 https://www.ibm.com/support/pages/node/7280199
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-107326High· 8.8Langflow OSS is affected by multiple vulnerabilities
CVE-2026-104308Medium· 4.3Langflow OSS is affected by multiple vulnerabilities
CVE-2026-93442High· 8.2IBM QRadar SIEM Out-of-bounds Read
CVE-2025-33141Medium· 6.5IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
CVE-2026-19319Medium· 5.3IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Onnx
CVE-2026-16725Medium· 6.5IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith