CVE-2026-108292: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
Published Oct 30, 2026
·Updated
IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.
Other sources
IBM Process Mining could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.
— IBM
Affected Software
1 affected componentFixes available
IBM Process Mining<=2.0.0 - 2.2.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Process Miningto a version that resolves this vulnerability.Fixed in 2.2.1Patch IF001 - Operational
Open an IBM Support Portal case for IBM Process Mining and request delivery of IBM Process Mining 2.2.1 IF001; the interim fix will be delivered through the support case.
Event History
Oct 30, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Nov 8, 2026
CVE Published
via MITRE·04:55 PM
Data Sourced
via MITRE·04:55 PM
RemedyDescriptionSeverityWeakness