Dashboard / CVE-2026-1726

CVE-2026-1726

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 60/100
Published: 2026-04-23 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: None
S: Unchanged
C: Low
I: Low
A: None

Description

IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 enables privilege escalation, allowing unauthorized users to perform administrative operations after being demoted. Attackers could access sensitive data, modify system configurations, or change permissions for other users. The issue undermines administrative controls and could lead to data breaches, system compromise, and loss of trust in the application's security mechanisms.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
ibm guardium_key_lifecycle_manager 4.1.0
ibm guardium_key_lifecycle_manager 4.1.1
ibm guardium_key_lifecycle_manager 4.2.0
ibm guardium_key_lifecycle_manager 4.2.1
ibm guardium_key_lifecycle_manager 5.0.0
ibm guardium_key_lifecycle_manager 5.1.0

References & Advisories (1)

Bug Bounty Relevance

60 / 100
✓ Network accessible
✓ No authentication
✓ No user interaction

CVSS Score

4.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS — Exploitation Probability

0.19%
Raw Score 0.001940
Percentile 9.1%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00194
2026-10-28
0.00194

Intelligence Sources

nvd ref →

External Links