CVE-2026-10545: planning analytics local from 2.1.0 (inclusive), through 2.1.21 (inclusive); +1 more affected products

Affected technology

planning analytics local · from 2.1.0 (inclusive), through 2.1.21 (inclusive)
ibm

Planning Analytics Local · 2.1.0 through 2.1.21
IBM

Description’s affected range: through 2.1.21

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

An attacker can redirect users to arbitrary external websites via a crafted URL. Vendor/CNA’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality, integrity and availability impact as high.