CVE-2026-13477
EUVD-2026-5343905.08.2026, 16:16
IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | qradar_security_information_and_event_manager | 7.5.0 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_1 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_10 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_11 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_12 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_13 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_13_interim_fix_01 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_13_interim_fix_02 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_14 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_14_interim_fix_01 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_14_interim_fix_02 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_15 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_15_interim_fix_01 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_15_interim_fix_02 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_15_interim_fix_03 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_15_interim_fix_04 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_2 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_3 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_4 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_5 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_6 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_7 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_8 |
| ibm | qradar_security_information_and_event_manager | 7.5.0:update_pack_9 |
| ibm | qradar_security_information_and_event_manager | 7.6.0 |
| ibm | qradar_security_information_and_event_manager | 7.6.0:fix_pack_1 |
𝑥
= Vulnerable software versions