CVE-2026-19283highCWE-863

CVE-2026-19283: high-severity vulnerability in IBM Observability with Instana (Agent)

IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Published · Updated

Follow this CVE+ Monitor Observability with Instana

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.7epss 0.4%
IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authenticated remote attacker to obtain sensitive information, caused by missing destination namespace validation when copying etcd mTLS client credentials from the openshift-etcd system namespace into an attacker-controlled namespace.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected products
IBM · Observability with Instana (Agent)
Related CVEs — IBM Observability with Instana (Agent)

In the same product, most dangerous first.

CVE-2026-19274CRITICALIBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container imageEPSS 0.4%CVE-2026-14893HIGHIBM Instana Observability is affected by multiple Prototype Pollution within Instana Agent container imageEPSS 0.3%