CVE-2026-95867: Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management

Published Nov 8, 2026

Updated

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM SevOne Network Performance Management (DI) to a version that resolves this vulnerability.
Fixed in 8.2.4
Upgrade
Upgrade IBM SevOne Network Performance Management (NMS) to a version that resolves this vulnerability.
Fixed in 8.2.3
Upgrade
Upgrade IBM SevOne Network Performance Management (SD-WAN) to a version that resolves this vulnerability.
Fixed in 8.2.3

Event History

Nov 8, 2026

CVE Published

via MITRE·07:44 PM

Data Sourced

via MITRE·07:44 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

IBM SevOne Network Performance Management installations in versions 7.0.0 through 8.2.2 are affected. Exploitation requires local access and high privileges on the affected system.

What could a successful attacker do?

A local attacker could exploit the buffer overflow to execute arbitrary code. The reported impact includes compromise of confidentiality, integrity, and availability.

CVE-2026-95867: Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What could a successful attacker do?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What could a successful attacker do?