CVE-2026-9836 LOW

CVE-2026-9836: IBM DataStage Flow Designer application is affected by an information disclosure vulnerability

Vendor Ibm
Product InfoSphere Information Server
Weakness CWE-200 · Info exposure
Published June 30, 2026
Last update June 30, 2026
View on NVD All CVEs

CVSS base score

3.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability.

Key dates

02Disclosure timeline

June 30, 2026 CVE published

Related vulnerabilities

04Related CVE

CVE-2026-58026 $wgNonincludableNamespaces can be bypassed by embedding redirect in other namespaces CVE-2026-42906 Windows Shell Information Disclosure Vulnerability CVE-2026-45594 Windows Application Identity (AppID) Information Disclosure Vulnerability CVE-2026-9183 24liveblog <= 2.2 - Authenticated (Contributor+) Exposure of Sensitive Information via Block Editor Script Localization CVE-2026-47124 Nezha WebSocket server stream discloses cross-tenant server telemetry to authenticated members