Remote Code Execution Vulnerability in IBM Engineering AI Hub
CVE-2026-15091

9.3CRITICAL

Key Information:

Vendor

IBM
Status
Engineering Ai Hub
Vendor
CVE Published:
17 July 2026

What is CVE-2026-15091?

A security flaw in IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0 potentially allows remote attackers to execute arbitrary scripts. This issue arises from improper input handling during the generation of web pages, enabling attackers to inject malicious scripts into vulnerable web applications.

Affected Version(s)

Engineering AI Hub 1.0.0

Engineering AI Hub 1.1.0

Engineering AI Hub 1.2.0

References

https://www.ibm.com/support/pages/node/7279964
vendor-advisorypatch

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.