MajorCritical vulnerability
CVE-2026-19627 (CVSS 8.2)
NVD · officialPublished Oct 12, 2026Risk 37/100
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths.
Technical details
CVSS
8.2
AV:NetworkAC:LowPR:NoneUI:NoneC:HighI:LowA:None
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source