CVE-2026-1267
published 2026-03-17CVE-2026-1267: IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to…
PriorityP338medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.34%
26.6th percentile
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to lack of proper access controls.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | planning_analytics_local | >= 2.1.0 < 2.1.18 | 2.1.18 |
| ibm | planning_analytics_local | 2.1.0 – 2.1.17 | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
ghsa7.5HIGH
vendor_redhat5.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-h2mr-fr44-h45m: IBM Planning Analytics Local 2
ghsa_unreviewed·2026-03-18
CVE-2026-1267 [MEDIUM] CWE-200 GHSA-h2mr-fr44-h45m: IBM Planning Analytics Local 2
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to lack of proper access controls.
Red Hat
kernel: drm/xe: Guard page-fault worker with runtime PM check
vendor_redhat·2026-10-14·CVSS 5.5
CVE-2026-98391 [LOW] CWE-617 kernel: drm/xe: Guard page-fault worker with runtime PM check
kernel: drm/xe: Guard page-fault worker with runtime PM check
In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Guard page-fault worker with runtime PM check
During VM teardown, the VM's runtime PM reference is dropped
asynchronously, allowing the device to autosuspend while stale page
faults belonging to the now-dead VM are still queued. When the
page-fault worker later tries to ack one of these, it calls into
guc_ct_send_locked() on an already-suspended device, tripping:
Assertion `!xe_pm_runtime_suspended(xe)` failed!
WARNING at xe_device.c:1267 xe_device_assert_mem_access+0x11c/0x140 [xe]
A live VM/exec queue always holds a PM reference while it has
outstanding work, so if the device is suspended at ack time, the
owning context is already gone and the fault i
No detection rules found.
No public exploits indexed.
2026-03-17
Published