CVE-2026-9610
LOW
2.3
CVSS 3.1
Description
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directly requesting the URL, bypassing intended access controls.
Metadata
Severity & Metrics
2.3
LOW CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
SSVC — CISA Coordinator
Affected products (2)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| IBM | Datacap | — | 9.1.7 ≤ 1.8.4, 9.1.8, 9.1.9 |
| IBM | Datacap Navigator | — | 9.1.7 ≤ 8.2.1.0, 9.1.8, 9.1.9 |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| CWE-425 | cna | CWE-425 Direct Request ('Forced Browsing') |
CVSS scores (1)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 2.3 | LOW | 3.1 | cna | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N |
References (1)