CVE-2026-19620

Received Received - Intake

Unauthorized Administrative Access in IBM Planning Analytics

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: IBM Corporation

Description

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-19620

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Planning	Analytics 2.0
IBM	Planning	Analytics 2.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-288	The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Attack-Flow Graph

Executive Summary

IBM Planning Analytics versions 2.0 and 2.1 have an improper authentication flaw that allows a remote attacker to gain unauthorized administrative access.

Impact Analysis

An attacker could exploit this to perform administrative actions without authorization, potentially leading to data breaches, unauthorized system changes, or further network compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection and access controls.

Mitigation Strategies

Apply the latest IBM Planning Analytics updates or patches to address improper authentication. Restrict network access to administrative interfaces and monitor for unauthorized access attempts.

Hi! I’m here to help you understand CVE-2026-19620. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70