Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2026-13477

IBM QRadar SIEM is vulnerable to remote code execution by privileged users

Medium4.7EPSS 0.49%
Published
Updated
Reserved
Assigned by
ibm

Description

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.

Scores

CVSS scores of CVE-2026-13477, by who scored it
Scored byCVSSScoreVector
ibmCNA (assigner)3.1Medium4.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
NVDNVD · Analyzed3.1High8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.49% · top 58% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.7.

Weakness

Affected products

  • IBM · QRadar

    • affected 7.6.0.0 – ≤ 7.6.0.1
    • affected 7.5.0 – ≤ 7.5.0 UP 15 Interim Fix 005

What to do

Solution: IBM strongly encourages customers to update their systems promptly. ProductVersionFixIBM QRadar SIEM 7.5.0  7.5.0 UP15 IF05 https://www.ibm.com/support/pages/release-qradar-750-update-package-15-interim-fix-05-sfs-202161520260715231428 IBM QRadar SIEM 7.6.0  7.6.0.2 https://www.ibm.com/support/pages/node/7280199

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2026-13477 badge
[![CVE-2026-13477](https://trackcve.app/badge/CVE-2026-13477.svg)](https://trackcve.app/cve/CVE-2026-13477)

Record last updated .