CVE-2026-19620: IBM Planning Analytics Local is affected by security vulnerabilities
Published Oct 12, 2026
·Updated
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.
Affected Software
1 affected component
IBM Planning Analytics Local=2.0, =2.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Planning Analytics Localto a version that resolves this vulnerability.Fixed in 2.1.24
Event History
Oct 12, 2026
CVE Published
via MITRE·10:40 PM
Data Sourced
via MITRE·10:40 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need before attempting exploitation?
The vulnerability requires low privileges (PR:L). It can be exploited remotely without user interaction.
2
What is the potential impact if exploitation succeeds?
A remote attacker could gain unauthorized administrative access. The listed CVSS impacts indicate high confidentiality, integrity, and availability impact.
3
Which product releases are identified as affected?
The advisory identifies IBM Planning Analytics 2.0 and 2.1. The affected software is IBM Planning Analytics Local.