CVE-2026-93442: IBM QRadar SIEM Out-of-bounds Read
IBM QRadar could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.
Other sources
IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM QRadar SIEMto a version that resolves this vulnerability.Fixed in 7.6.0.5 - Upgrade
Upgrade
IBM QRadar SIEMto a version that resolves this vulnerability.Fixed in 7.5.0 UP16 IF02
Event History
Frequently Asked Questions
Which QRadar SIEM versions are affected?
Affected versions are IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001.
Does exploitation require authentication or user interaction?
No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What could a successful attacker do?
A remote attacker could cause a denial of service or obtain sensitive information through the out-of-bounds read vulnerability.