CVE-2026-105473: IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS
Published Nov 3, 2026
·Updated
IBM QRadar 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 is vulnerable to Open Redirect. A victim must open a specifically crafted URL while authenticated to QRadar to trigger this.
Other sources
IBM QRadar SIEM is vulnerable to Open Redirect. A victim must open a specifically crafted URL while authenticated to QRadar to trigger this.
— IBM
Affected Software
2 affected components
IBM QRadar<=7.5.0 - 7.5.0 UP16 IF02
IBM QRadar<=7.6.0.0 - 7.6.0.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM QRadar SIEMto a version that resolves this vulnerability.Fixed in 7.6.0.6 - Upgrade
Upgrade
IBM QRadar SIEMto a version that resolves this vulnerability.Fixed in 7.5.0 UP16 IF03
Event History
Nov 3, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Nov 8, 2026
CVE Published
via MITRE·04:50 PM
Data Sourced
via MITRE·04:50 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness