CVE-2026-3684mediumCWE-266

CVE-2026-3684: medium-severity vulnerability in IBM Cloud Pak for Data System

Vulnerabilities exists in IBM Cloud Pak for Data System

Published

Follow this CVE+ Monitor Cloud Pak for Data System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001 through - 11.3.1.2 Interim Fix 002 could allow a user with administrative privileges to read and write arbitrary files on the system due to incorrect permission assignments.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Affected products
IBM · Cloud Pak for Data System
Related CVEs — IBM Cloud Pak for Data System

In the same product, most dangerous first.

CVE-2026-14350MEDIUMVulnerabilities exists in IBM Cloud Pak for Data SystemEPSS 0.3%CVE-2026-3686MEDIUMVulnerabilities exists in IBM Cloud Pak for Data SystemEPSS 0.2%