CVE-2026-16725mediumCWE-22

CVE-2026-16725: fallo de gravedad media en IBM Watson Speech Services Cartridge

IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith

Publicada el

Seguir esta CVE+ Monitorear Watson Speech Services Cartridge

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

10Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.5
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
IBM · Watson Speech Services Cartridge
CVEs relacionadas — IBM Watson Speech Services Cartridge

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-19319MEDIUMIBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in OnnxEPSS —CVE-2026-82418CRITICALIBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSLEPSS —CVE-2026-17493HIGHIBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.EPSS —