Directory Traversal Vulnerability in IBM Planning Analytics
CVE-2026-75061

7.5HIGH

Key Information:

Vendor

IBM
Status
Planning Analytics
Vendor
CVE Published:
12 October 2026

What is CVE-2026-75061?

The vulnerability allows remote attackers to exploit IBM Planning Analytics 2.0 and 2.1 by sending specially crafted URL requests containing directory traversal sequences (e.g., '/../'). This could enable unauthorized access to system files, leading to potential data compromise and manipulation. Organizations using these versions should apply the latest patches to mitigate the risk.

Affected Version(s)

Planning Analytics 2.0

Planning Analytics 2.1

References

https://www.ibm.com/support/pages/node/7291604
vendor-advisorypatch

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.