CVE-2026-91868: IBM Security QRadar EDR Improper Access Control
IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to obtain sensitive information due to improper access control.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Security QRadar EDRto a version that resolves this vulnerability.Fixed in 3.12.27
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker must be authenticated to IBM Security QRadar EDR. The available information does not indicate that unauthenticated attackers can exploit it.
What is the likely impact if exploitation succeeds?
An authenticated attacker could obtain sensitive information. The provided severity vector indicates confidentiality impact is high, with no stated integrity or availability impact.
Which deployments should be reviewed?
Review IBM Security QRadar EDR versions from 3.12 through 3.12.26. The available information does not state whether the issue affects a default configuration or identify a workaround.