Open Redirect Vulnerability in IBM Planning Analytics Local
CVE-2026-10545

7.5HIGH

Key Information:

Vendor

IBM
Status
Planning Analytics Local
Vendor
CVE Published:
30 July 2026

What is CVE-2026-10545?

IBM Planning Analytics Local versions 2.1.0 through 2.1.21 are susceptible to an open redirect vulnerability. This issue allows attackers to manipulate URLs to redirect users to malicious external sites. When integrated into Single Sign-On (SSO) authentication processes, this vulnerability could compromise session tokens, enabling attackers to hijack user sessions and gain unauthorized access.

Affected Version(s)

Planning Analytics Local 2.1.0 <= 2.1.21

References

https://www.ibm.com/support/pages/node/7278566
vendor-advisorypatch

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.