Race Condition Vulnerability in IBM Cognos Analytics by IBM
CVE-2026-15995

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Cognos Analytics
Vendor
CVE Published:
17 July 2026

What is CVE-2026-15995?

A race condition vulnerability in IBM Cognos Analytics 12.1.3 GA can lead to incorrect report summary results or failures in report processing. This issue arises in the Agentic AI assistant's handling of concurrent requests, where multiple authenticated users submitting report-related tasks simultaneously can trigger inconsistent behavior. Organizations using affected versions are advised to review the situation carefully as improper handling of this vulnerability could disrupt operations and lead to erroneous reporting.

Affected Version(s)

Cognos Analytics 12.1.3 GA Version with build number <= 12.1.3-2606251736

References

https://www.ibm.com/support/pages/node/7280311
vendor-advisorypatch

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.