CVE-2026-15995
published 2026-07-17CVE-2026-15995: IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause…
PriorityP419medium4.2CVSS 3.1
AVNACHPRNUIRSUCLILAN
EPSS
0.17%
5.6th percentile
IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple authenticated users submit report-related tasks simultaneously.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | cognos_analytics | — | — |
| ibm | cognos_analytics | 12.1.3 GA Version with build number – 12.1.3-2606251736 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Cognos Analytics up to 12.1.3-2606251736 Agentic AI Assistant agent.c race condition (WID-SEC-2026-2395)
vuldb·2026-07-17·CVSS 5.4
CVE-2026-15995 [MEDIUM] IBM Cognos Analytics up to 12.1.3-2606251736 Agentic AI Assistant agent.c race condition (WID-SEC-2026-2395)
A vulnerability classified as critical was found in IBM Cognos Analytics up to 12.1.3-2606251736. This vulnerability affects unknown code of the file agent.c of the component Agentic AI Assistant. The manipulation results in race condition.
This vulnerability is reported as CVE-2026-15995. The attack can be launched remotely. No exploit exists.
GHSA
IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race
ghsa_unreviewed·2026-07-17
CVE-2026-15995 [MEDIUM] CWE-362 IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race
IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple authenticated users submit report-related tasks simultaneously.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-17
Published