CVE-2026-1267

CWE-200 — Information Exposure5 documents4 sources
Severity
6.5MEDIUM
EPSS
0.0%
top 88.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Planning Analytics Local
Timeline
PublishedMar 17
Latest updateMar 18

Description

IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to lack of proper access controls.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDibm/planning_analytics_local2.1.0 — 2.1.18
▶CVEListV5ibm/planning_analytics_local2.1.0 — 2.1.17

🔴Vulnerability Details

2
GHSA
GHSA-h2mr-fr44-h45m: IBM Planning Analytics Local 2↗2026-03-18
▶
CVEList
IBM Planning Analytics Information Disclosure↗2026-03-17
▶
CVE-2026-1267 (MEDIUM CVSS 6.5) | IBM Planning Analytics Local 2.1.0 | cvebase.io