CVE-2026-2700mediumCWE-284

CVE-2026-2700: falha de média gravidade em IBM watsonx Orchestrate Cartridge for Cloud…

Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar watsonx Orchestrate Cartridge for Cloud Pak for Data

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.2%
IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 allows low-privileged users to execute administrative functions by directly invoking backend APIs.As a result, UI-level access restrictions are ineffective, as the backend fails to enforce role-based access control.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
IBM · watsonx Orchestrate Cartridge for Cloud Pak for Data
CVEs relacionadas — IBM watsonx Orchestrate Cartridge for Cloud…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-2477MEDIUMMultiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant CartridgeEPSS 0.3%CVE-2025-0166LOWMultiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant CartridgeEPSS 0.2%CVE-2025-1837MEDIUMMultiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant CartridgeEPSS 0.2%