Open Redirect Vulnerability in IBM QRadar Products
CVE-2026-105473

4.6MEDIUM

Key Information:

Vendor

IBM
Status
Qradar
Vendor
CVE Published:
8 November 2026

What is CVE-2026-105473?

IBM QRadar products including versions 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 are prone to an open redirect vulnerability. This flaw allows attackers to exploit the application by sending victims a specially crafted URL. If the victim, while authenticated, clicks on this malicious link, they may be redirected to a harmful external site, posing a security risk. Organizations using these versions of QRadar are advised to apply appropriate patches and mitigations to avoid potential exploitation.

Affected Version(s)

QRadar 7.5.0 <= 7.5.0 Update Pack 16 Interim Fix 02

QRadar 7.6.0.0 <= 7.6.0.5

References

https://www.ibm.com/support/pages/node/7295450
vendor-advisorypatch

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.