Skip to content
Sign in
4.7 Medium

CVE-2026-13477 IBM QRadar SIEM is vulnerable to remote code execution by privileged users

Description

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Exploitable remotely over the network, with an administrator account and without any user action; the impact on data or service is limited.

Attack vector
Network
Attack complexity
Low
Privileges required
High
Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Affected products and versions

Product Affected versions Fixed in
QRadar 7.6 7.6.0.0 → 7.6.0.1 No fix stated
QRadar 7.5 7.5.0 → latest No fix stated

Other CVEs of QRadar

The 22 CVEs of QRadar →
CVE-2026-93442 IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a… 8.2 High CVE-2025-33141 IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information… 6.5 Medium CVE-2026-5522 IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic… 6.7 Medium CVE-2026-10025 IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE)… 8.2 High
Track this CVE