Sensitive Information Exposure in IBM Watson Speech Services Cartridge
CVE-2026-19319

5.3MEDIUM

Key Information:

Vendor

IBM
Status
Watson Speech Services Cartridge
Vendor
CVE Published:
4 November 2026

What is CVE-2026-19319?

IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 may be susceptible to an out-of-bounds read vulnerability. This flaw enables remote attackers to exploit the system, potentially leading to unauthorized exposure of sensitive information. It is essential for users of these versions to apply the necessary security updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

Watson Speech Services Cartridge 4.0.0 <= 5.4.0

References

https://www.ibm.com/support/pages/node/7293524
vendor-advisorypatch

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.