File Path Manipulation Vulnerability in IBM Planning Analytics

CVE-2026-19627

What is CVE-2026-19627?

IBM Planning Analytics versions 2.0 and 2.1 have a security flaw that enables remote attackers to exploit improper validation of file paths. This vulnerability can allow unauthorized entry into sensitive directory structures, facilitating the reading of arbitrary files on the host system. Furthermore, the flaw can lead to overwriting certain application files, posing significant security risks for users. It is essential for organizations using affected versions to apply available patches promptly to safeguard their data and maintain system integrity.

References