CVE-2026-1726

EUVD-2026-25127
IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 enables privilege escalation, allowing unauthorized users to perform administrative operations after being demoted. Attackers could access sensitive data, modify system configurations, or change permissions for other users. The issue undermines administrative controls and could lead to data breaches, system compromise, and loss of trust in the application's security mechanisms.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.8 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 9%
Affected Products (NVD)
VendorProductVersion
ibmguardium_key_lifecycle_manager
4.1.0
ibmguardium_key_lifecycle_manager
4.1.1
ibmguardium_key_lifecycle_manager
4.2.0
ibmguardium_key_lifecycle_manager
4.2.1
ibmguardium_key_lifecycle_manager
5.0.0
ibmguardium_key_lifecycle_manager
5.1.0
𝑥
= Vulnerable software versions