CVE-2026-93442: IBM QRadar SIEM Out-of-bounds Read

Q: Which QRadar SIEM versions are affected?

Affected versions are IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001.

Q: Does exploitation require authentication or user interaction?

No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: What could a successful attacker do?

A remote attacker could cause a denial of service or obtain sensitive information through the out-of-bounds read vulnerability.

Published Oct 13, 2026

Updated

IBM QRadar could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.

Other sources

IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.

— MITRE

Affected Software

2 affected components

IBM QRadar<=7.6.0.0 - 7.6.0.4

IBM QRadar<=7.5.0 - 7.5.0 UP16 IF01

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM QRadar SIEM to a version that resolves this vulnerability.
Fixed in 7.6.0.5
Upgrade
Upgrade IBM QRadar SIEM to a version that resolves this vulnerability.
Fixed in 7.5.0 UP16 IF02

Event History

Oct 13, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Oct 20, 2026

CVE Published

via MITRE·09:48 PM

Data Sourced

via MITRE·09:48 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7292240

Frequently Asked Questions

Which QRadar SIEM versions are affected?

Affected versions are IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001.

Does exploitation require authentication or user interaction?

No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What could a successful attacker do?

A remote attacker could cause a denial of service or obtain sensitive information through the out-of-bounds read vulnerability.

CVE-2026-93442: IBM QRadar SIEM Out-of-bounds Read

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Which QRadar SIEM versions are affected?

Does exploitation require authentication or user interaction?

What could a successful attacker do?

Company

Resources

Contact

Frequently Asked Questions

Which QRadar SIEM versions are affected?

Does exploitation require authentication or user interaction?

What could a successful attacker do?