CVE-2026-9610
2.3
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Summary
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directly requesting the URL, bypassing intended access controls.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Datacap | 9.1.7 <= 1.8.4 | affected |
| IBM | Datacap | 9.1.8 | affected |
| IBM | Datacap | 9.1.9 | affected |
| IBM | Datacap Navigator | 9.1.7 <= 8.2.1.0 | affected |
| IBM | Datacap Navigator | 9.1.8 | affected |
| IBM | Datacap Navigator | 9.1.9 | affected |
Weaknesses
- CWE-425: CWE-425 Direct Request ('Forced Browsing')
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.