CVE-2026-8636CWE-316

Multiple Vulnerabilities in IBM Datacap

Medium · published June 22, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can use the same keys to decrypt password, gain access to the application and access sensitive data in the database.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.1th percentile
Weakness
CWE-316 · Cleartext Storage of Sensitive Information in Memory
Published
2026-06-22T14:16Z
EPSS history
Timeline
  • 22 JUN 14:16Z
    Multiple Vulnerabilities in IBM Datacap
    cvelistv5