CVE-2026-19622

Received Received - Intake

Authentication Bypass in IBM Planning Analytics

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: IBM Corporation

Description

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-19622

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Planning	Analytics 2.0
IBM	Planning	Analytics 2.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-288	The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Attack-Flow Graph

Executive Summary

IBM Planning Analytics 2.0 and 2.1 have an authentication bypass and privilege escalation vulnerability due to improper validation of sub-requests. This allows a remote attacker to gain unauthorized access and elevate their privileges without proper authentication.

Impact Analysis

This vulnerability could allow attackers to access sensitive data, modify system configurations, or perform unauthorized actions within IBM Planning Analytics. The high CVSS score (8.8) indicates a severe risk of confidentiality, integrity, and availability impacts.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, potentially violating GDPR, HIPAA, or other compliance requirements. Organizations using affected versions may face legal and regulatory penalties due to data breaches or unauthorized access.

Mitigation Strategies

Apply IBM Planning Analytics updates or patches as soon as they are available to address improper sub-request validation. Restrict network access to affected systems and monitor for unusual authentication attempts or privilege escalation activities.

Hi! I’m here to help you understand CVE-2026-19622. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70