Is CVE-2026-15091 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-15091?

CVE-2026-15091 has a CVSS v3 severity of CRITICAL (9.3).

Back

CVE-2026-15091

Description

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary scripts due to improper neutralization of input during web page generation.