CVE-2026-9836
Received Received - Intake

Information Disclosure in IBM InfoSphere Information Server

Publication date: 2026-06-30

Last updated on: 2026-06-30

Assigner: IBM Corporation

Description
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-30
Last Modified
2026-06-30
Generated
2026-07-01
AI Q&A
2026-06-30
EPSS Evaluated
N/A
NVD
CVE-2026-9836
EUVD
EUVD-2026-40378

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ibm datastage_flow_designer From 11.7.0.0 (inc) to 11.7.1.6 (inc)
ibm infosphere_information_server From 11.7.0.0 (inc) to 11.7.1.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-9836 is an information disclosure vulnerability affecting IBM DataStage Flow Designer, part of IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6.

This flaw, classified under CWE-200, allows unauthorized actors to access sensitive information without needing user interaction.

The vulnerability has a low severity score of 3.5 (CVSS v3.1) and requires an attacker to be adjacent to the network with low attack complexity and low privileges.

Impact Analysis

This vulnerability can lead to unauthorized disclosure of sensitive information within the affected IBM InfoSphere Information Server environment.

Although it does not impact data integrity or availability, the exposure of sensitive data could pose risks depending on the nature of the information accessed.

Since the attack requires low privileges and no user interaction, it could be exploited by nearby attackers with limited access.

Mitigation Strategies

To mitigate the information disclosure vulnerability in IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6, users should apply the fixes provided by IBM.

  • Upgrade to IBM InfoSphere Information Server version 11.7.1.0, 11.7.1.6, or 11.7.1.6 Service Pack 3 where the vulnerability has been addressed.
  • Since no workarounds are currently available, applying the official patches is the recommended immediate action.
Compliance Impact

The vulnerability in IBM InfoSphere Information Server allows unauthorized actors to access sensitive information, which could potentially impact compliance with data protection standards such as GDPR and HIPAA.

However, the provided information does not specify any direct effects or compliance implications related to these regulations.

Users are advised to apply the fixes provided by IBM to mitigate the risk of information disclosure.

Detection Guidance

There are no specific detection methods or commands provided in the available information for identifying this vulnerability on your network or system.

IBM advises users to apply the provided fixes to mitigate the risk, as no workarounds or detection commands are currently available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-9836. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart