CVE-2026-13477: qradar security information and event manager 7.5.0, 7.6.0; +1 more affected products

Affected technology

qradar security information and event manager · 7.5.0
ibm

qradar security information and event manager · 7.5.0 · update update_pack_1
ibm

qradar security information and event manager · 7.5.0 · update update_pack_10
ibm

qradar security information and event manager · 7.5.0 · update update_pack_11
ibm

qradar security information and event manager · 7.5.0 · update update_pack_12
ibm

qradar security information and event manager · 7.5.0 · update update_pack_13
ibm

qradar security information and event manager · 7.5.0 · update update_pack_13_interim_fix_01
ibm

qradar security information and event manager · 7.5.0 · update update_pack_13_interim_fix_02
ibm

qradar security information and event manager · 7.5.0 · update update_pack_14
ibm

qradar security information and event manager · 7.5.0 · update update_pack_14_interim_fix_01
ibm

qradar security information and event manager · 7.5.0 · update update_pack_14_interim_fix_02
ibm

qradar security information and event manager · 7.5.0 · update update_pack_15
ibm

qradar security information and event manager · 7.5.0 · update update_pack_15_interim_fix_01
ibm

qradar security information and event manager · 7.5.0 · update update_pack_15_interim_fix_02
ibm

qradar security information and event manager · 7.5.0 · update update_pack_15_interim_fix_03
ibm

qradar security information and event manager · 7.5.0 · update update_pack_15_interim_fix_04
ibm

qradar security information and event manager · 7.5.0 · update update_pack_2
ibm

qradar security information and event manager · 7.5.0 · update update_pack_3
ibm

qradar security information and event manager · 7.5.0 · update update_pack_4
ibm

qradar security information and event manager · 7.5.0 · update update_pack_5
ibm

qradar security information and event manager · 7.5.0 · update update_pack_6
ibm

qradar security information and event manager · 7.5.0 · update update_pack_7
ibm

qradar security information and event manager · 7.5.0 · update update_pack_8
ibm

qradar security information and event manager · 7.5.0 · update update_pack_9
ibm

qradar security information and event manager · 7.6.0
ibm

qradar security information and event manager · 7.6.0 · update fix_pack_1
ibm

QRadar · 7.6.0.0 through 7.6.0.1, 7.5.0 through 7.5.0 UP 15 Interim Fix 005
IBM

Description’s affected range: through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · High privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated privileged user could execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input. Vendor/CNA’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality, integrity and availability impact as low. NVD’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.