CVE-2026-9610CWE-425

Multiple Vulnerabilities in IBM Datacap

Low · published June 22, 2026

CVSS v3.1
2.3
EPSS
0%
Percentile
16.7
In the wild
Unconfirmed
What it is

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directly requesting the URL, bypassing intended access controls.

The record
Technical detail
CVSS v3.1
2.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.7th percentile
Weakness
CWE-425 · Direct Request ('Forced Browsing')
Published
2026-06-22T14:22Z
EPSS history
Timeline
  • 22 JUN 14:22Z
    Multiple Vulnerabilities in IBM Datacap
    cvelistv5