Improper Access Control in IBM Process Mining by IBM
CVE-2026-114464

9.3CRITICAL

Key Information:

Vendor

IBM
Status
Process Mining
Vendor
CVE Published:
8 November 2026

What is CVE-2026-114464?

IBM Process Mining versions 2.0.0 through 2.2.1 may expose sensitive information to remote attackers due to improper access control mechanisms. This vulnerability could allow unauthorized access, raising significant security concerns for affected users. Organizations using these versions should assess their exposure and apply any available patches promptly to mitigate potential risks.

Affected Version(s)

Process Mining 2.0.0 <= 2.2.1

References

https://www.ibm.com/support/pages/node/7294875
vendor-advisorypatch

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.