CVE-2026-16725mediumCWE-22

CVE-2026-16725: falha de média gravidade em IBM Watson Speech Services Cartridge

IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith

Publicada em

Seguir esta CVE+ Monitorar Watson Speech Services Cartridge

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.4%
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
IBM · Watson Speech Services Cartridge
CVEs relacionadas — IBM Watson Speech Services Cartridge

No mesmo produto, das mais perigosas para as menos.

CVE-2026-82418CRITICALIBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSLEPSS 0.4%CVE-2026-17493HIGHIBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.EPSS 0.3%CVE-2026-19319MEDIUMIBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in OnnxEPSS 0.2%