CVE-2026-5522 MEDIUM

CVE-2026-5522: QRadar contains hard-coded credentials

Vendor Ibm
Product QRadar
Weakness CWE-798 · Hardcoded credentials
Published September 4, 2026
Last update September 4, 2026
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N

What the vulnerability does

01Description

IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

Key dates

02Disclosure timeline

September 4, 2026 CVE published
September 4, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-5810 WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Improper Authorization due to use of Hardcoded Credentials CVE-2026-1233 Text to Speech (TTS) by Mementor <= 1.9.8 - Use of Hardcoded Password to Unauthenticated Remote Database Access CVE-2026-27073 WordPress Addi – Cuotas que se adaptan a ti plugin <= 2.0.4 - Broken Authentication vulnerability CVE-2025-10850 Felan Framework <= 1.1.4 - Hardcoded Credentials CVE-2026-32834 Easy PayPal Events & Tickets < 1.4 Authentication Bypass via QR Code Scanning