CVE-2026-1726

MEDIUM EPSS 9.3%
Published Apr 23, 20262mo ago · Modified Jun 17, 20261w ago
4.8 CVSS 3.1
Medium
Find Similar
Published Apr 23, 2026 2mo ago
Last Modified Jun 17, 2026 1w ago

Description

IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 enables privilege escalation, allowing unauthorized users to perform administrative operations after being demoted. Attackers could access sensitive data, modify system configurations, or change permissions for other users. The issue undermines administrative controls and could lead to data breaches, system compromise, and loss of trust in the application's security mechanisms.

CVSS Details

Base Score
4.8
Exploitability
2.2
Impact
2.5
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
9.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-269 Improper Privilege Management Authorization

Affected Products 6

VendorProductVersionRange
ibmguardium_key_lifecycle_manager4.1.0any
ibmguardium_key_lifecycle_manager4.1.1any
ibmguardium_key_lifecycle_manager4.2.0any
ibmguardium_key_lifecycle_manager4.2.1any
ibmguardium_key_lifecycle_manager5.0.0any
ibmguardium_key_lifecycle_manager5.1.0any

References 1

  • ibm.com https://www.ibm.com/support/pages/node/7268697
    PatchVendor Advisory

Remediation

  • ibm.com https://www.ibm.com/support/pages/node/7268697
    PatchVendor Advisory