CVE-2026-8636mediumCWE-316

CVE-2026-8636: medium-severity vulnerability in IBM Datacap

Multiple Vulnerabilities in IBM Datacap

Published

Follow this CVE+ Monitor Datacap Navigator+ Monitor Datacap

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.2%
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can use the same keys to decrypt password, gain access to the application and access sensitive data in the database.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
IBM · DatacapIBM · Datacap Navigator
Related CVEs — IBM Datacap

In the same product, most dangerous first.

CVE-2018-1773MEDIUMCVE-2018-1773EPSS 1.4%CVE-2020-4902MEDIUMCVE-2020-4902EPSS 1.0%CVE-2024-39741MEDIUMIBM Datacap Navigator directory traversalEPSS 0.7%CVE-2020-4935MEDIUMCVE-2020-4935EPSS 0.5%CVE-2024-39729MEDIUMIBM Datacap Navigator information disclosureEPSS 0.4%CVE-2024-39740MEDIUMIBM Datacap Navigator information disclosureEPSS 0.4%