CVE-2026-13463
published 2026-07-28CVE-2026-13463: IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files.
PriorityP342high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.38%
30.8th percentile
IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | cloud_pak_system | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files.
ghsa_unreviewed·2026-07-28
CVE-2026-13463 [HIGH] CWE-798 IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files.
IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files.
VulDB
IBM Cloud Pak System 2.3.5.0 log file
vuldb·2026-07-28·CVSS 7.5
CVE-2026-13463 [HIGH] IBM Cloud Pak System 2.3.5.0 log file
A vulnerability categorized as problematic has been discovered in IBM Cloud Pak System 2.3.5.0. This issue affects some unknown processing. Such manipulation leads to sensitive information in log files.
This vulnerability is traded as CVE-2026-13463. An attack has to be approached locally. There is no exploit available.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-28
Published