CVE-2026-10545CWE-601

CVE-2026-10545

High · published July 30, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user sessions.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00383 · 31.2th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2026-07-30T23:17Z
Affected products (1)
ProductVersionsFixed in
ibm/planning_analytics_local≥ 2.1.0, ≤ 2.1.21—
References (1)
https://www.ibm.com/support/pages/node/7278566 · [email protected]
EPSS history
Timeline
  • 30 JUL 17:59Z
    IBM Planning Analytics Local is affected by Open Redirect
    cvelistv5