CVE-2026-76587: Buffer Overflow
Published Oct 15, 2026
·Updated
CWE-121 stack-based buffer overflow (memory-safety) in the TM1 C++ OData engine, reachable from authenticated REST.
Affected Software
2 affected components
IBM Planning Analytics<=2.0
IBM Planning Analytics<=2.1
Event History
Oct 15, 2026
CVE Published
via IBM·10:53 PM
Data Sourced
via IBM·10:53 PM
DescriptionAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires an authenticated user who can reach the TM1 C++ OData engine through its REST interface.
2
Which component should be prioritized for review and remediation?
Prioritize IBM Planning Analytics deployments that expose or permit authenticated access to the TM1 C++ OData REST functionality.
3
What is the potential technical impact?
The issue is a stack-based buffer overflow in the TM1 C++ OData engine, which is a memory-safety flaw.