Is CVE-2026-19627 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-19627?

CVE-2026-19627 has a CVSS v3 severity of HIGH (8.2).

Back

CVE-2026-19627

Description

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths.