Authentication Bypass Vulnerability in IBM Planning Analytics Products
CVE-2026-19622

8.8HIGH

Key Information:

Vendor

IBM

Vendor
CVE Published:
12 October 2026

What is CVE-2026-19622?

IBM Planning Analytics versions 2.0 and 2.1 are susceptible to an authentication bypass vulnerability that enables remote attackers to bypass standard authentication protocols. This flaw arises from inadequate validation of sub-requests, allowing adversaries to escalate their privileges and potentially gain unauthorized access to sensitive resources and functionalities. It is critical for users of affected versions to apply patches and follow security best practices to mitigate risks.

Affected Version(s)

Planning Analytics 2.0

Planning Analytics 2.1

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.