Description
IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.
Published: 2026-10-20
Score: 8.2 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Patch Immediately
AI Analysis

Impact

The vulnerability is an out‑of‑bounds read that allows a remote attacker to cause a denial of service or to read sensitive data. It arises from memory corruption when the system processes certain inputs, potentially leading to crashes or exposure of protected information.

Affected Systems

IBM QRadar SIEM is affected, specifically versions 7.5.0 and the Update Package 16 Interim Fix 001, as well as 7.6.0.0 through 7.6.0.4.

Risk and Exploitability

The CVSS score is 8.2, indicating a high severity. The EPSS score is less than 1 % and the vulnerability is not listed in CISA KEV, suggesting a low probability of exploitation today. The attack vector is remote, requiring an attacker to send malicious data that triggers the out-of-bounds read and causes a crash or leaks data.

Generated by OpenCVE AI on October 21, 2026 at 16:40 UTC.

Remediation

Vendor Solution

IBM strongly encourages customers to update their systems promptly. ProductVersionFixIBM QRadar SIEM7.6.0 7.6.0.5 https://www.ibm.com/support/pages/node/7288897 IBM QRadar SIEM7.5.0 7.5.0 UP16 IF02 https://www.ibm.com/support/pages/node/7289152

OpenCVE Recommended Actions

  • Upgrade IBM QRadar SIEM to version 7.6.0.5 or apply Update Package 16 Interim Fix 001 for 7.5.0. This patch resolves the out‑of‑bounds read flaw.
  • Restrict network access to the QRadar appliance to trusted IP ranges to reduce exposure to remote exploitation attempts.
  • Monitor system logs and memory usage for abnormal crashes or read errors, and review audit logs for signs of exploitation attempts.

Generated by OpenCVE AI on October 21, 2026 at 16:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 21 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 20 Oct 2026 22:00:00 +0000

Type Values Removed Values Added
Description IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.
Title IBM QRadar SIEM Out-of-bounds Read
First Time appeared Ibm
Ibm qradar Security Information And Event Manager
Weaknesses CWE-125
CPEs cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_package_16_interim_fix_001:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.6.0.4:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm qradar Security Information And Event Manager
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H'}

Subscriptions

Ibm Qradar Security Information And Event Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-21T15:37:13.506Z

Reserved: 2026-09-17T22:05:34.817Z

Link: CVE-2026-93442

cve-icon Vulnrichment

Updated: 2026-10-21T15:37:10.491Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-20T22:21:07.473

Modified: 2026-10-21T16:17:41.433

Link: CVE-2026-93442

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T14:00:07Z

Weaknesses