Stack-Based Buffer Overflow in IBM Planning Analytics Affects Multiple Versions
CVE-2026-76587

8.8HIGH

Key Information:

Vendor

IBM
Status
Planning Analytics
Vendor
CVE Published:
20 October 2026

What is CVE-2026-76587?

IBM Planning Analytics versions 2.0 and 2.1 exhibit a vulnerable state due to a stack-based buffer overflow attributed to inadequate bounds checking. This flaw allows an attacker to exploit the vulnerability, potentially leading to arbitrary code execution, which could compromise the integrity and security of the affected systems. Users of these versions should ensure they apply the necessary patches to mitigate this risk.

Affected Version(s)

Planning Analytics 2.0

Planning Analytics 2.1

References

https://www.ibm.com/support/pages/node/7291604
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.